CVE-2018-7533

2018-03-1418:00:00

CWE-276

icscert

www.cve.org

AI Score

7.8

Confidence

High

EPSS

Percentile

10.4%

JSON

An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system.

CNA Affected

[
  {
    "product": "OSIsoft PI Data Archive",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OSIsoft PI Data Archive"
      }
    ]
  }
]

References

www.securityfocus.com/bid/103399

ics-cert.us-cert.gov/advisories/ICSA-18-072-02