PT-2018-18108

CVE-2018-7500

·

Published

2018-03-14

·

Updated

2019-10-09

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OSIsoft PI Web API versions 2017 R2 and prior
Description A Permissions, Privileges, and Access Controls issue was discovered, allowing privileges to be escalated. This escalation gives attackers access to the PI System via the service account.
Recommendations For OSIsoft PI Web API versions 2017 R2 and prior, update to a version later than 2017 R2 to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2018-7500
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com