What’s Vulnerable › Vulnerabilities

CVE-2017-7930

• Severity: high (CVSS 7.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-25 · updated 2026-06-17
• Weakness: CWE-287

Description

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to spoof a server within a collective.

Affected products

• OSIsoft PI Data Archive: through 3.4.410.1256

References

• http://www.securityfocus.com/bid/99059
• https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02
• http://www.securityfocus.com/bid/99059
• https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02

Get alerted when CVE-2017-7930 or the next vulnerability affects your stack