March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2019-10937 – Siemens SIMATIC TDC CP51M1 Denial of Service Vulnerability
September 11, 2019
Rewterz Threat Advisory – CVE-2019-10935 – Siemens SIMATIC WinCC and PCS7 Denial of Service Vulnerability
September 11, 2019
Rewterz Threat Advisory – CVE-2019-10937 – Siemens SIMATIC TDC CP51M1 Denial of Service Vulnerability
September 11, 2019
Rewterz Threat Advisory – CVE-2019-10935 – Siemens SIMATIC WinCC and PCS7 Denial of Service Vulnerability
September 11, 2019
Severity
High
Analysis Summary
An attacker could exploit this vulnerability in a third-party component to remotely execute code on the client computer with the same permissions as the PI SQL Client user.
Communication with a malicious PI SQL Data Access Server (RTQP Engine) is needed to expose a PI SQL client to this vulnerability.
Impact
Privilege access
Affected Vendors
OSIsoft LLC
Affected Products
PI SQL Client 2018 (PI SQL Client OLEDB 2018)
Remediation
OSIsoft recommends users upgrade to PI SQL Client 2018 R2 or later to resolve this issue.