PatchTheCVEpi vision vulnerabilities and fixes
Recent CVEs affecting pi vision, with upgrade or downgrade steps. 6 tracked.
Also searched as: pivision.
pi vision has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-04-18. Highest priority: CVE-2020-25163 (score 42/100).
- CVE-2021-43553 LOW 3.1 UPGRADE PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the ch
- CVE-2021-43551 MEDIUM 6.5 UPGRADE A remote attacker with write access to PI Vision could inject code into a display
- CVE-2020-25167 MEDIUM 4.9 UPGRADE OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileg
- CVE-2020-25163 HIGH 7.7 UPGRADE A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI
- CVE-2020-10643 MEDIUM 6.5 DOWNGRADE An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile
- CVE-2020-10614 MEDIUM 4.8 UPGRADE In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI
FAQ
How do I fix pi vision vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pi vision being exploited right now?
None of the tracked pi vision CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pi vision CVE should I patch first?
CVE-2020-25163 currently ranks highest (42/100): A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI.