VULNERABILITY INTELLIGENCE

CVE-2020-10604

CVSS score7.5 HIGH
EPSS probability2.15%
CISA KEVNot currently listed
Published2020-07-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connections and queries to PI Data Archive.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-248
  • nvd@nist.gov: CWE-755

Primary references