high7.8
CVE-2020-10610
In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to…
Impact
In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or modification.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osisoft | Pi Api | through 1.6.8.26 through 2.0.2.5 |
| Osisoft | Pi Buffer Subsystem | through 4.8.0.18 |
| Osisoft | Pi Connector | through 1.0.0.54 through 1.1.0.10 through 1.2.0.6 through 1.2.0.42 through 1.2.1.71 through 1.2.2.79 |
| Osisoft | Pi Connector Relay | through 2.5.19.0 |
| Osisoft | Pi Data Archive | through 3.4.430.460 |
| Osisoft | Pi Data Collection Manager | through 2.5.19.0 |
| Osisoft | Pi Integrator | through 2.2.0.183 |
| Osisoft | Pi Interface Configuration Utility | through 1.5.0.7 |
| Osisoft | Pi To Ocs | through 1.1.36.0 |