CVE-2020-10606
In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information disclosure, deletion, or modification if the local computer also processes PI System data from other users, such as from a shared workstation or terminal server deployment.
Published:Jul 24, 2020
Last Modified:Nov 21, 2024
EPS:Jul 24, 2020
EPSS Score:0.00058
CVSS Score:7.8
Affected Products
Vendor
Product
Action
Vendor
Osisoft
Product
Pi Api
Osisoft
Pi Api
Vendor
Osisoft
Product
Pi Buffer Subsystem
Osisoft
Pi Buffer Subsystem
Vendor
Osisoft
Product
Pi Connector
Osisoft
Pi Connector
Vendor
Osisoft
Product
Pi Connector Relay
Osisoft
Pi Connector Relay
Vendor
Osisoft
Product
Pi Data Archive
Osisoft
Pi Data Archive
Vendor
Osisoft
Product
Pi Data Collection Manager
Osisoft
Pi Data Collection Manager
Vendor
Osisoft
Product
Pi Integrator
Osisoft
Pi Integrator
Vendor
Osisoft
Product
Pi Interface Configuration Utility
Osisoft
Pi Interface Configuration Utility
Vendor
Osisoft
Product
Pi To Ocs
Osisoft
Pi To Ocs
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
