{"id":"CVE-2020-10600","aliases":["EUVD-2020-3048","GHSA-3h4f-76g6-g5wc"],"status":"published","title":"OSIsoft PI System","description":"An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01201,"percentile":0.6843,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2020-07-24T23:01:05Z","modified":"2026-06-17T02:48:04Z","products":[{"vendor":"aveva","product":"pi data archive"},{"vendor":"osisoft","product":"pi data archive"},{"vendor":"osisoft","product":"pi_data_archive"}],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10600"},{"url":"https://github.com/advisories/GHSA-3h4f-76g6-g5wc"}],"sources":{"cve":[{"id":"CVE-2020-10600","title":"OSIsoft PI System","description":"An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).","status":"published","published":"2020-07-24T23:01:05.997Z","modified":"2024-09-16T19:20:28.875Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2020-3048","description":"An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).","status":"published","published":"2020-07-24T23:01:05Z","modified":"2024-09-16T19:20:28Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-03T00:55:23.696592Z"}],"ghsa":[{"id":"GHSA-3h4f-76g6-g5wc","title":"In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash...","description":"In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive.","status":"published","published":"2022-05-24T17:24:20Z","modified":"2023-01-29T05:03:36Z","updated_at":"2026-11-02T14:45:21.37961Z"}],"nvd":[{"id":"CVE-2020-10600","description":"An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).","status":"published","published":"2020-07-24T23:15:11.69Z","modified":"2026-06-17T02:48:04.483Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:06:10.086163Z"}]}}