CVE-2020-10600

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Jul 24, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-106017.8VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a locaCVE-2020-106025.3In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race conditionCVE-2020-106038.8WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.CVE-2020-106047.5In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through speciCVE-2020-106057.5Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.CVE-2020-106067.8In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. CVE-2020-106078.8In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the lCVE-2020-106087.8In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI SyCVE-2020-106097.5Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system seCVE-2020-10617.5A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory. The vulnerability couldCVE-2020-106107.8In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PICVE-2020-106119.8Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary cod
CVE-2020-10600: High severity, CVSS 7.1 | Vulnix