Unscored severity · published Oct 1, 2009
CVE-2009-0209
PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information…
–
CVSS
0.7%
EPSS
No
On KEV
Description
PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
PI Server · Osisoft
through 3.4.375.99; 2.4; 2.6; 3.4.363.97; 3.4.370; 3.4.375.99 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0209
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0209
www.securityfocus.com
http://www.securityfocus.com/archive/1/506826/100/0/threaded
More from PI Server
–
CVE-2015-1013
OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL (AF) Trusted Users group lacks the Everyone account, which allows remote authenticated users to…