PT-2025-25353 · Aveva · Aveva Pi Data Archive

CVE-2025-36539 · Published 2025-06-12 · Updated 2026-06-22

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AVEVA PI Data Archive products (affected versions not specified)

Description The issue concerns an uncaught exception that could be exploited by an authenticated user to shut down necessary subsystems of the AVEVA PI Data Archive, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-248

Related Identifiers

CVE-2025-36539

Affected Products

Aveva Pi Data Archive

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-36539 · Security Note
• https://twitter.com/AndreGironda/status/2066928433284915493 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-162-07 · Note
• https://twitter.com/CVEnew/status/1933257484585648322 · Twitter Post
• https://aveva.com/en/support-and-success/cyber-security-updates · Note
• https://twitter.com/breachspider/status/2068952381786554696 · Twitter Post
• https://t.me/cvetracker/26122 · Telegram Post