CVE-2020-10606CWE-276

In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software

published July 24, 2020

CVSS
—
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information disclosure, deletion, or modification if the local computer also processes PI System data from other users, such as from a shared workstation or terminal server deployment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2020-07-24T22:55Z
EPSS history
Timeline
  • 24 JUL 22:55Z
    In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software
    cvelistv5