PT-2017-18007
CVE-2017-7934
·
Published
2017-08-25
·
Updated
2019-10-09
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
OSIsoft PI Server 2017 PI Data Archive versions prior to 2017
Description
An issue with improper authentication was found, which could allow a malicious user to authenticate with a server. This flaw is related to the use of older protocol versions in PI Network Manager, potentially causing it to behave in an undefined manner.
Recommendations
For OSIsoft PI Server 2017 PI Data Archive versions prior to 2017, update to a version that addresses the improper authentication issue to prevent potential exploitation. As a temporary workaround, consider restricting the use of older protocol versions in PI Network Manager to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾