CVE-2018-7500 A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the serv...
CriticalCVSS 9.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| osisoft pi web api | <= 2017 | No fix listed |
| osisoft pi web api | = 2017-r2 | No fix listed |
| osisoft pi vision | = 2017-r2 | No fix listed |
References
- 103396 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource