Vulnerabilities > CVE-2020-10602 - NULL Pointer Dereference vulnerability in PI Data Archive 2018

047910
CVSS 3.5 - LOW
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
pi
CWE-476

Summary

In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive.

Vulnerable Configurations

Part Description Count
Application
Pi
2

Common Weakness Enumeration (CWE)