Vulnerabilities > Osisoft

DATE CVE VULNERABILITY TITLE RISK
2014-04-12 CVE-2013-2809 Improper Input Validation vulnerability in Osisoft PI Interface
The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service (interface shutdown) via a crafted TCP packet.
network
osisoft CWE-20
7.1
2013-08-22 CVE-2013-2801 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Osisoft PI Interface
The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service (instance shutdown and data-collection outage) via crafted C37.118 configuration packets that trigger an invalid read operation.
network
low complexity
osisoft CWE-119
5.0
2013-08-22 CVE-2013-2800 Resource Management Errors vulnerability in Osisoft PI Interface
The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service (memory consumption or memory corruption, instance shutdown, and data-collection outage) via crafted C37.118 configuration packets.
network
low complexity
osisoft CWE-399
5.0
2012-07-20 CVE-2012-3008 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Osisoft PI OPC DA Interface 2.3.16.16/2.3.17.18
Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items.
network
osisoft CWE-119
8.5
2009-10-01 CVE-2009-0209 Cryptographic Issues vulnerability in Osisoft PI Server
PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors.
network
low complexity
osisoft CWE-310
6.4