CVE-2019-18275
Last modified
CVE-2019-18275 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.. EPSS estimates a 1.10% chance of exploitation in the next 30 days.
Description
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Osisoft | Pi Vision | < 2019 |
References
- https://www.us-cert.gov/ics/advisories/icsa-20-014-06Third Party Advisory, US Government Resource
- https://www.us-cert.gov/ics/advisories/icsa-20-014-06Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-18275?
How severe is CVE-2019-18275?
How do I fix CVE-2019-18275?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-18265Digital Alert Systems’ DASDEC software prior to version 4.1 …5.4
- CVE-2019-18267An issue was found in GE S2020/S2020G Fast Switch 61850, S20…5.4
- CVE-2019-18269Omron’s CS and CJ series PLCs have an unrestricted externall…9.8
- CVE-2019-1827A vulnerability in the Online Help web service of Cisco Smal…6.1
- CVE-2019-18271OSIsoft PI Vision, All versions of PI Vision prior to 2019. …8.8
- CVE-2019-18273OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 S…4.8
- CVE-2019-18276An issue was discovered in disable_priv_mode in shell.c in G…7.8
- CVE-2019-18277A flaw was found in HAProxy before 2.0.6. In legacy mode, me…7.5
- CVE-2019-18278When executing VideoLAN VLC media player 3.0.8 with libqt on…7.8
- CVE-2019-18279In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the inclu…8.8
- CVE-2019-1828A vulnerability in the web-based management interface of Cis…5.9
- CVE-2019-18280Sourcecodester Online Grading System 1.0 is affected by a Cr…8.8
Are you affected by CVE-2019-18275?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST