| Package | Affected versions | Patched versions |
|---|---|---|
| pi api | ≤ 1.6.8.26≤ 2.0.2.5 | |
| pi buffer subsystem | ≤ 4.8.0.18 | |
| pi connector | ≤ 1.0.0.54≤ 1.1.0.10≤ 1.2.0.42≤ 1.2.0.6≤ 1.2.1.71≤ 1.2.2.79≤ 1.3.0.1≤ 1.3.0.130≤ 1.3.1.135≤ 1.4.0.17≤ 1.5.0.88 | |
| pi connector relay | ≤ 2.5.19.0 | |
| pi data archive | ≤ 3.4.430.460 | |
| pi data collection manager | ≤ 2.5.19.0 | |
| pi integrator | ≤ 2.2.0.183 | |
| pi interface configuration utility | ≤ 1.5.0.7 | |
| pi to ocs | ≤ 1.1.36.0 |
In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or modification.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free