Osisoft Pi Server vulnerabilities

2 CVEs affecting Osisoft Pi Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-1013, published 2015-05-26.

More from Osisoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-1013, published 2015-05-26. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL (AF) Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended…
• CVE-2009-0209, published 2009-10-01. Medium severity, CVSS 6.4. EPSS: 0.7% chance of exploitation in the next 30 days. PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via…