{"api_version":"1","generated_at":"2026-07-23T06:07:45+00:00","cve":"CVE-2018-7533","urls":{"html":"https://cve.report/CVE-2018-7533","api":"https://cve.report/api/cve/CVE-2018-7533.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-7533","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-7533"},"summary":{"title":"CVE-2018-7533","description":"An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system.","state":"PUBLIC","assigner":"ics-cert@hq.dhs.gov","published_at":"2018-03-14 18:29:00","updated_at":"2019-10-09 23:42:00"},"problem_types":["CWE-276"],"metrics":[],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02","name":"https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02","refsource":"MISC","tags":["Third Party Advisory","US Government Resource"],"title":"OSIsoft PI Data Archive | CISA","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/103399","name":"103399","refsource":"BID","tags":["Third Party Advisory","VDB Entry"],"title":"OSIsoft PI Data Archive Privilege Escalation and Denial of Service Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7533","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7533","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"7533","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"osisoft","cpe5":"pi_data_archive","cpe6":"2017","cpe7":"r2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"7533","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"osisoft","cpe5":"pi_data_archive","cpe6":"2017","cpe7":"r2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"7533","vulnerable":"1","versionEndIncluding":"2017","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"osisoft","cpe5":"pi_data_archive","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2018-7533","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"OSIsoft PI Data Archive","version":{"version_data":[{"version_value":"OSIsoft PI Data Archive"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-276"}]}]},"references":{"reference_data":[{"name":"https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02"},{"name":"103399","refsource":"BID","url":"http://www.securityfocus.com/bid/103399"}]}},"nvd":{"publishedDate":"2018-03-14 18:29:00","lastModifiedDate":"2019-10-09 23:42:00","problem_types":["CWE-276"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"severity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:osisoft:pi_data_archive:*:*:*:*:*:*:*:*","versionEndIncluding":"2017","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:osisoft:pi_data_archive:2017:r2:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"7533","Ordinal":"123815","Title":"CVE-2018-7533","CVE":"CVE-2018-7533","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"7533","Ordinal":"1","NoteData":"An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system.","Type":"Description","Title":null},{"CveYear":"2018","CveId":"7533","Ordinal":"2","NoteData":"2018-03-14","Type":"Other","Title":"Published"},{"CveYear":"2018","CveId":"7533","Ordinal":"3","NoteData":"2018-03-15","Type":"Other","Title":"Modified"}]}}}