PT-2026-3198 · Unknown · Process Optimization Designer

Christopher Wu · Publicado 2026-01-13 · Atualizado 2026-01-16 · CVE-2025-65117

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to 2025

Description An authenticated attacker with Process Optimization Designer User privileges can embed OLE objects into graphics. Successful exploitation could lead to privilege escalation to the identity of a user who interacts with the graphical elements.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-676

Identificadores relacionados

BDU:2026-00493

CVE-2025-65117

Produtos afetados

Process Optimization Designer

Referências · 9

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json · Nota
• https://bdu.fstec.ru/vul/2026-00493 · Nota de Segurança
• https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea · Nota
• https://twitter.com/CVEnew/status/2012126464724873659 · Publicação no Twitter
• https://aveva.com/en/support-and-success/cyber-security-updates · Aviso do Fabricante
• https://cisa.gov/news-events/ics-advisories/icsa-26-015-01 · Nota
• https://osv.dev/vulnerability/CVE-2025-65117 · Aviso do Fabricante
• https://aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-001.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-65117 · Nota de Segurança