CVE-2017-9641 - CVE House
Back to Database
Status published High CVE-2017-9641

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability...

Vulnerability Description

PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft recommends that users upgrade to PI Vision 2017 or greater to mitigate this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-9641

Credits & Attribution

No credits recorded in the NVD database.

References

More from OSIsoft

View All →
CVE-2021-43553
OSIsoft PI Vision
Low 3.1
CVE-2021-43551
OSIsoft PI Vision
Medium 6.5
CVE-2021-43549
OSIsoft PI Web API
Medium 6.9
CVE-2020-25167
OSIsoft PI Vision Incorrect Authorization
Medium 4.9
CVE-2020-25163
OSIsoft PI Vision Cross-site Scripting
High 7.7

Affected Vendor

Affected Software

PI Coresight
Vulnerable Versions:
2016 R2 and earlier versions.

Timeline

Official Publish: May 25th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-352

MITRE ATT&CK TTPs

T1566.002 Spearphishing Link
Initial Access
T1204.001 Malicious Link
Execution
T1098 Account Manipulation
Persistence
T1565.001 Stored Data Manipulation
Impact