CVE-2009-0209: Osisoft Pi Server

Medium severity, CVSS 6.4. EPSS: 0.7% chance of exploitation in the next 30 days.

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors.

Affected products

• Osisoft Pi Server: up to and including 3.4.375.99; version 2.4 only; version 2.6 only; version 3.4.363.97 only; version 3.4.370 only; version 3.4.375.99 only

Published 2009-10-01. Last modified 2026-06-16.