Vulnerability Description
An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Osisoft | Pi Data Archive | <= 2017 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/103399Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/103399Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2018-7533?
CVE-2018-7533 is a vulnerability with a CVSS score of 7.8 (HIGH). An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full co...
How severe is CVE-2018-7533?
CVE-2018-7533 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7533?
Check the references section above for vendor advisories and patch information. Affected products include: Osisoft Pi Data Archive.