Skip to main content

Pi Data Archive CVE-2018-7531

MEDIUM
Improper Input Validation (CWE-20)
2018-03-14 ics-cert@hq.dhs.gov
Denial Of Service Pi Data Archive
5.9
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
5.9 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 14, 2018 - 18:29 nvd
MEDIUM 5.9

DescriptionNVD

An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server.

AnalysisAI

An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server. Affected products include: Osisoft Pi Data Archive.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Pi Data Archive

View all
CVE-2020-10610 HIGH
7.8 Jul 24

In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exp
CVE-2020-10608 HIGH
7.8 Jul 24

In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity che
CVE-2020-10606 HIGH
7.8 Jul 24

In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected

CVE-2018-7533 HIGH
7.8 Mar 14

An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Rated high sev
CVE-2017-7930 HIGH
7.4 Aug 25

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. Rated

CVE-2020-10604 HIGH
7.5 Jul 25

In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager s
CVE-2018-7529 HIGH
7.5 Mar 14

A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Rated high

CVE-2020-10600 HIGH
7.1 Jul 24

An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. R
CVE-2017-7934 MEDIUM
5.9 Aug 25

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. Rated

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2018-7531 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy