CVE-2018-7500

Description

A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.474

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-7500,CVE-2018-7508 are affected in AVEVA OSISoft PI Web API 2017	Windows
Vulnerabilities CVE-2018-7500,CVE-2018-7508 are affected in AVEVA OSISoft PI Web API 2017-r2	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234