Osisoft Pi Interface Configuration Utility vulnerabilities

3 CVEs affecting Osisoft Pi Interface Configuration Utility, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-10610, published 2020-07-24.

More from Osisoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-10610, published 2020-07-24. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at…
• CVE-2020-10606, published 2020-07-24. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information…
• CVE-2020-10608, published 2020-07-24. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local…