CVE-2020-10610

In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or modification.

• osisoft pi api (<= 1.6.8.26) • osisoft pi api (<= 2.0.2.5) • osisoft pi buffer subsystem (<= 4.8.0.18) • osisoft pi connector (<= 1.0.0.54) • osisoft pi connector (<= 1.1.0.10) • osisoft pi connector (<= 1.2.0.6) • osisoft pi connector (<= 1.2.0.42) • osisoft pi connector (<= 1.2.1.71) • osisoft pi connector (<= 1.2.2.79) • osisoft pi connector (<= 1.3.0.1) • osisoft pi connector (<= 1.3.0.130) • osisoft pi connector (<= 1.3.1.135) • osisoft pi connector (<= 1.4.0.17) • osisoft pi connector (<= 1.5.0.88) • osisoft pi connector relay (<= 2.5.19.0) • osisoft pi data archive (<= 3.4.430.460) • osisoft pi data collection manager (<= 2.5.19.0) • osisoft pi integrator (<= 2.2.0.183) • osisoft pi interface configuration utility (<= 1.5.0.7) • osisoft pi to ocs (<= 1.1.36.0)