CVE-2025-36539

MEDIUM

AVEVA PI Data Archive 2023-2023 P1/2018 SP3 P4-P6 - Authenticated DoS via Uncaught Exception

Title source: llm

Description

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service.

References (2)

Core 2

Core References

Various Sources

https://www.aveva.com/en/support-and-success/cyber-security-updates/

Third Party Advisory, US Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07

Scores

CVSS v3 6.5

EPSS 0.0030

EPSS Percentile 21.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-248

Status published

Products (4)

AVEVA/PI Data Archive 2023 - 2018 SP3 Patch 4

AVEVA/PI Data Archive 2023 Patch 1

AVEVA/PI Server 2023 - 2018 SP3 Patch 6

AVEVA/PI Server 2023 Patch 1 - 2018 SP3 Patch 6

Published Jun 12, 2025

Tracked Since Feb 18, 2026