VULNERABILITY INTELLIGENCE
CVE-2009-0209
CVSS score6.4 MEDIUM
EPSS probability0.67%
CISA KEVNot currently listed
Published2009-10-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Description
PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors.