CVE-2016-8353 in PI Web API 2015 R2

Résumé

par MITRE

An issue was discovered in OSIsoft PI Web API 2015 R2 (Version 1.5.1). There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 28/09/2016
• Divulgation: 13/02/2017
• Modérer: accepté
• Entrée: VDB-96866
• CPE: prêt
• CWE: CWE-264 (confirmé)
• CVSS: 6.4 (NVD)
• EPSS: 0.00721
• KEV: non
• Activités: très faible
• Secteur: Pharma, Energy, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8353
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8353
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8353/