← Back to home
ICSA-18-072-04  ·  Published 2018-03-13  ·  View on CISA ICS-CERT ↗

OSIsoft PI Web API

CVSS 9.3 CRITICAL

Risk Summary

ATTENTION: Exploitable remotely/low skill level to exploit.

CVEs (2)

Remediations

  • OSIsoft recommends that users upgrade to PI Vision 2017 R2 Update 1 or PI AF Services 2017 R2 Update 1, which both address the PI Web API vulnerabilities. OBtain the updates from OSIsoft.
  • OSIsoft has released the following alert

Affected Vendors

OSIsoft LLC

Affected Products (1)

OSIsoft LLC · PI Web API <=2017 R2

Affected Sectors

Multiple Sectors

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more