CVE-2020-10600 - CVE House
Back to Database
Status published Medium CVE-2020-10600

OSIsoft PI System

Vulnerability Description

An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10600

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • William Knowles, Senior Security Consultant at Applied Risk, reported these vulnerabilities to OSIsoft

References

More from OSIsoft

View All →
CVE-2021-43553
OSIsoft PI Vision
Low 3.1
CVE-2021-43551
OSIsoft PI Vision
Medium 6.5
CVE-2021-43549
OSIsoft PI Web API
Medium 6.9
CVE-2020-25167
OSIsoft PI Vision Incorrect Authorization
Medium 4.9
CVE-2020-25163
OSIsoft PI Vision Cross-site Scripting
High 7.7

Affected Vendor

Affected Software

PI Data Archive
Vulnerable Versions:
unspecified

Timeline

Official Publish: July 24th, 2020
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Weaknesses (CWE)

CWE-476

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1499.004 Application or System Exploitation
Impact
T1489 Service Stop
Impact
T1203 Exploitation for Client Execution
Execution
T1190 Exploit Public-Facing Application
Initial Access