CVE-2020-10604 - In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests

Back Back to CVE browser

HIGH

In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests

Published Jul 24, 2020

7.5

HIGH

CVSS 3.1

EPSS 2.15%

Description

In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connections and queries to PI Data Archive.

Affected products

Vendor n/a Product OSIsoft PI System multiple products and versions Default
unknown
Affected
- OSIsoft PI System multiple products and versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	OSIsoft PI System multiple products and versions	unknown	Affected OSIsoft PI System multiple products and versions

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-248

CWE-755

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-3052
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-3052		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Jul 24, 2020

Updated Aug 4, 2024

Reserved Mar 16, 2020

Link CVE-2020-10604

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-10604

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Jul 24, 2020

Updated Aug 4, 2024

Link EUVD-2020-3052

GitHub

No data