CVE-2025-36539

AVEVA PI Data Archive Uncaught Exception

CVSS 7.1 HIGHEPSS 0.3%CWE-248

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

AVEVA · PI Data Archive AVEVA · PI Server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.aveva.com/en/support-and-success/cyber-security-updates/https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07