Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server.
CVSS Information
N/A
Vulnerability Type
可信数据的反序列化
Vulnerability Title
OSIsoft PI Data Archive 安全漏洞
Vulnerability Description
OSIsoft PI System是美国OSIsoft公司的一套数据采集、分析、和可视化软件。PI Server是PI System的核心产品。OSIsoft PI Data Archive是PI Server的一个通过客户端软件实现高性能的数据检索的高效存储和归档的组件。 OSIsoft PI Data Archive 2017及之前的版本中存在安全漏洞。攻击者可通过更改反序列化数据,发送自定义请求利用该漏洞造成拒绝服务(服务器崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A