QwikSec

Security Database

CVE

CWE

Training

CVE-2020-10608

Published: Jul 24, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized information disclosure, deletion, or modification.

Vendor	Product	Versions
n/a	OSIsoft PI System multiple products and versions	affected `OSIsoft PI System multiple products and versions`

Weaknesses (CWE)

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.