PT-2018-18134
CVE-2018-7529
·
Published
2018-03-14
·
Updated
2019-10-09
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
OSIsoft PI Data Archive versions prior to 2018
Description
A Deserialization of Untrusted Data issue allows unauthenticated users to modify deserialized data, potentially sending custom requests that crash the server.
Recommendations
For OSIsoft PI Data Archive versions prior to 2018, update to a version newer than 2017 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾