1. Home
  2. CVE Database
  3. CVE-2021-43551
MEDIUM · 6.5

CVE-2021-43551

A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the in...

Vulnerability Description

A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other data accessible with victim's user permissions.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
OsisoftPi Vision< 2021

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2021-43551?

CVE-2021-43551 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the in...

How severe is CVE-2021-43551?

CVE-2021-43551 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-43551?

Check the references section above for vendor advisories and patch information. Affected products include: Osisoft Pi Vision.