CVE-2020-10602 Race condition in OSIsoft PI System multiple products and versions
An authenticated remote attacker can crash PI Network Manager via a race condition, blocking connections to PI Data Archive.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-10602?
CVE-2020-10602 is a medium-severity vulnerability in OSIsoft PI System multiple products and versions, published on 24 Jul 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive.
Weakness: CWE-476
Which versions are affected by CVE-2020-10602?
It affects 1 product.
Products include Pi Data Archive.
How do I fix CVE-2020-10602?
No fix has been published for CVE-2020-10602 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-10602 being exploited?
There is no known exploitation of CVE-2020-10602 in the wild and no public exploit code.
Sources
Also known as GHSA-rmv5-j4cf-p434.