Lucene search

IcscertCVE-2020-10602

HistoryJul 24, 2020 - 11:15 p.m.

CVE-2020-10602

2020-07-2423:15:11

CWE-476

icscert

web.nvd.nist.gov

cve

osisoft

pi system

authenticated

remote attacker

race condition

pi network manager

pi data archive

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

47.8%

JSON

In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive.

Affected configurations

Nvd

Node

pidata_archiveMatch2018

pidata_archiveMatch2018sp2

VendorProductVersionCPE
pidata_archive2018cpe:2.3:a:pi:data_archive:2018:*:*:*:*:*:*:*
pidata_archive2018cpe:2.3:a:pi:data_archive:2018:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
pi	data_archive	2018	cpe:2.3:a:pi:data_archive:2018:::::::*
pi	data_archive	2018	cpe:2.3:a:pi:data_archive:2018:sp2::::::

CNA Affected

[
  {
    "product": "OSIsoft PI System multiple products and versions",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OSIsoft PI System multiple products and versions"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-20-133-02

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

47.8%

JSON

Related for CVE-2020-10602