CVE-2020-10600

Published: Jul 24, 2020Modified: Nov 21, 2024

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Exploitability: 2.8 / Impact: 4.2

Source: NVD

Description

An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).

Affected (1)

Products: Osisoft: Pi Data Archive

Osisoft

1 product

Pi Data Archive

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Osisoft Pi Data Archive	Up to 2019

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.