CVE-2017-5153: OSIsoft PI Coresight and PI Web API vulnerability
Osisoft · OSIsoft PI Coresight and PI Web API
Affected: OSIsoft PI Coresight and PI Web API · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 31% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords to become exposed for the affected services, potentially leading to unauthorized shutdown of the affected PI services as well as potential reuse of domain credentials.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- OSIsoft PI Coresight and PI Web APIOSIsoft PI Coresight and PI Web API
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Osisoft
- Published
- February 2017
CoverageNo articles yet
No CyberSIXT article names CVE-2017-5153 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.