CVE-2017-7930

2017-08-2519:00:00

CWE-287

icscert

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

49.6%

JSON

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to spoof a server within a collective.

CNA Affected

[
  {
    "product": "OSIsoft PI Server 2017",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OSIsoft PI Server 2017"
      }
    ]
  }
]

References

www.securityfocus.com/bid/99059

ics-cert.us-cert.gov/advisories/ICSA-17-164-02