CVE-2021-3095

A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other data accessible with victim’s user permissions.

Date published : 2021-12-28

https://us-cert.cisa.gov/ics/advisories/icsa-21-313-05