CVE-2020-10600
Summary
| CVE | CVE-2020-10600 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-07-24 23:15:00 UTC |
| Updated | 2020-08-05 17:39:00 UTC |
| Description | An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions). |
Risk And Classification
Problem Types: CWE-476
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Osisoft | Pi Data Archive | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| OSIsoft PI System (Update A) | CISA | MISC | us-cert.cisa.gov | Third Party Advisory, US Government Resource |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: William Knowles, Senior Security Consultant at Applied Risk, reported these vulnerabilities to OSIsoft
There are currently no legacy QID mappings associated with this CVE.