AVEVA PI Data Archive
Successful exploitation of these vulnerabilities could shut down necessary subsystems and cause a denial-of-service condition.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-44019US | — | — | ||
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if
exploited, could allow an authenticated user to shut down certain
necessary PI Data Archive subsys… | ||||
| CVE-2025-36539US | — | — | ||
AVEVA PI Data Archive products
are vulnerable to an uncaught exception that, if exploited, could allow
an authenticated user to shut down certain necessary PI Data Archive
subsy… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-162-07 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-162-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationPI Data Archive
AVEVA further recommends users follow general defensive measures:
- MitigationPI Data Archive
AVEVA further recommends users follow general defensive measures:
- MitigationPI Server
AVEVA further recommends users follow general defensive measures:
- MitigationPI Server
AVEVA further recommends users follow general defensive measures:
- FixedPI Data Archive
(CVE-2025-44019) PI Data Archive 2018 SP3 Patch 4 and all prior and PI Server 2018 SP3 Patch 6 and all prior can alternatively be fixed by upgrading to PI Server 2018 SP3 Patch 7 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select Version 2018 SP3 Patch 7 or higher.
https://my.osisoft.com/ - FixedPI Data Archive
(CVE-2025-44019, CVE-2025-36539) All affected versions of PI Data Archive and PI Server can be fixed by upgrading to PI Server 2024 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select version 2024 or higher.
https://my.osisoft.com/ - FixedPI Server
(CVE-2025-44019) PI Data Archive 2018 SP3 Patch 4 and all prior and PI Server 2018 SP3 Patch 6 and all prior can alternatively be fixed by upgrading to PI Server 2018 SP3 Patch 7 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select Version 2018 SP3 Patch 7 or higher.
https://my.osisoft.com/ - FixedPI Server
(CVE-2025-44019, CVE-2025-36539) All affected versions of PI Data Archive and PI Server can be fixed by upgrading to PI Server 2024 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select version 2024 or higher.
https://my.osisoft.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan