Vulnerabilities > CVE-2020-10604 - Improper Handling of Exceptional Conditions vulnerability in Osisoft PI Data Archive 2018

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
osisoft
CWE-755

Summary

In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connections and queries to PI Data Archive.

Vulnerable Configurations

Part Description Count
Application
Osisoft
2