CVE-2017-9641 PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vul...
HighCVSS 8.8
EPSS 0.83%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| osisoft pi coresight | <= 2016-r2 | No fix listed |
| osisoft pi coresight | = 2016 R2 and earlier versions. | No fix listed |
References
- 99540 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- techsupport.osisoft.com vendor-advisory