CVE-2017-7930

7.4 highEPSS 2.0%

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to spoof a server within a collective.

Severity

CVSS 3.0

7.4 high

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2017-08-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

osisoft:pi_data_archive

References

http://www.securityfocus.com/bid/99059
https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02
http://www.securityfocus.com/bid/99059
https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02

Check your stack JSON