Description (CNA)
A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other data accessible with victim's user permissions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OSIsoft / PI Vision | affected All versions through 2021 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.