CVE-2018-7529 | BDVDB-2026-97893 Detail

OSIsoft PI Data Archive

Description#

A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-502 Deserialization of Untrusted Data

References#

https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02
http://www.securityfocus.com/bid/103399

Exploit#

No public exploit known

History#

Version 12018-03-14Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.