CVE-2020-10608CWE-347

In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries

published July 24, 2020

CVSS
—
EPSS
0%
Percentile
16.2
In the wild
Unconfirmed
What it is

In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized information disclosure, deletion, or modification.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00255 · 16.2th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2020-07-24T22:46Z
EPSS history
Timeline
  • 24 JUL 22:46Z
    In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries
    cvelistv5