Description (CNA)
PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OSIsoft / PI Coresight | affected 2016 R2 and earlier versions. |
CWE
CWE-352
References
- https://ics-cert.us-cert.gov/advisories/ICSA-17-192-04
- https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00320
- http://www.securityfocus.com/bid/99540
ADP enrichment
No English description supplied.