CVE-2020-10600

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
OSIsoft	PI Data Archive	>= unspecified, < 2018 SP2

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02Third Party Advisory, US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02Third Party Advisory, US Government Resource

Timeline

Published: Jul 24, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-106017.8VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a loca CVE-2020-106025.3In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition CVE-2020-106038.8WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.CVE-2020-106047.5In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through speci CVE-2020-106057.5Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.CVE-2020-106067.8In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. CVE-2020-106078.8In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the l CVE-2020-106087.8In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI Sy CVE-2020-106097.5Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system se CVE-2020-10617.5A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory. The vulnerability could CVE-2020-106107.8In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI CVE-2020-106119.8Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary cod