CVE-2009-0209

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-10-01 · updated 2026-06-16
Weakness: CWE-310

Description

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors.

Affected products

OSIsoft Pi Server: through 3.4.375.99; 2.4, 2.6, 3.4.363.97, 3.4.370, 3.4.375.99-sp2

References

http://www.securityfocus.com/archive/1/506826/100/0/threaded
http://www.securityfocus.com/archive/1/506826/100/0/threaded

Get alerted when CVE-2009-0209 or the next vulnerability affects your stack