« Volver al listado

CVE-2009-0209

Estado: ModificadaMedia (6.4)—

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Osisoft — PI Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-0209",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-10-01T15:30:00.217",
  "references": [
    {
      "url": "http://www.securityfocus.com/archive/1/506826/100/0/threaded",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/506826/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "PI Server en OSIsoft PI System anterior a v 3.4.380.x no usa adecuadamente el cifrado en el proceso de autenticación por defecto, lo que permite a atacantes remotos leer o modificar información en bases de datos a través de vectores sin especificar."
    }
  ],
  "lastModified": "2026-06-16T23:04:30.207",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:osisoft:pi_server:*:sp2:32bit_windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E537E3DE-CF27-43A7-8429-A668D6A98568",
              "versionEndIncluding": "3.4.375.99"
            },
            {
              "criteria": "cpe:2.3:a:osisoft:pi_server:2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5184AEE5-6726-459D-A9A1-DB50BE60D4DE"
            },
            {
              "criteria": "cpe:2.3:a:osisoft:pi_server:2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "929EB927-9953-466A-80EC-9D849A620AE5"
            },
            {
              "criteria": "cpe:2.3:a:osisoft:pi_server:3.4.363.97:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FBE5B6CB-6D07-4B8C-BAE9-E9F153301209"
            },
            {
              "criteria": "cpe:2.3:a:osisoft:pi_server:3.4.370:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D00D4FA3-9531-4030-B492-C1F51E12AE2B"
            },
            {
              "criteria": "cpe:2.3:a:osisoft:pi_server:3.4.375.99:sp2:64bit_windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E37BC8ED-73BC-4E5A-B4C9-68995D1D2BBD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}