CVE-2020-25163

CVE-2020-25163 is a code injection vulnerability affecting OSIsoft PI Vision 2020 versions prior to 3.5.0. A remote attacker with write access to PI ProcessBook files can inject malicious code that executes when a victim views or interacts with an infected display. This vulnerability has a CVSS score of 7.3 (HIGH), indicating a low attack complexity and requiring user interaction, but potentially leading to high impact in terms of unauthorized information disclosure, modification, or deletion of PI System data and other accessible data. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.