Vulnerability Details CVE-2021-43549
A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a malicious website. As a result, a victim may disclose sensitive information to the attacker or be provided with false information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.2%
CVSS Severity
CVSS v3 Score 6.9
CVSS v2 Score 3.5
References
Products affected by CVE-2021-43549
-
cpe:2.3:a:osisoft:pi_web_api:2014
-
cpe:2.3:a:osisoft:pi_web_api:2015
-
cpe:2.3:a:osisoft:pi_web_api:2016
-
cpe:2.3:a:osisoft:pi_web_api:2017
-
cpe:2.3:a:osisoft:pi_web_api:2018
-
cpe:2.3:a:osisoft:pi_web_api:2019