Vulnerabilities > CVE-2020-10602 - NULL Pointer Dereference vulnerability in PI Data Archive 2018

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
high complexity
pi
CWE-476

Summary

In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive.

Vulnerable Configurations

Part Description Count
Application
Pi
2

Common Weakness Enumeration (CWE)