ICSA-25-317-03

icsaUScisa_csaf_ot

AVEVA Edge

view advisory published 2025-11-13

Successful exploitation of this vulnerability could allow a local attacker to reverse engineer passwords through brute force.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-9317US—OT elevated—
The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active D…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationEdge

    AVEVA recommends that organizations evaluate the impact of this vulnerability based on their operational environment, architecture, and product implementation.

  • FixedEdge

    Apply data-protection at the project level with a strong master password. For configuration step-by-step refer to AVEVA Edge "Technical Reference Manual" > Project Overview > Configuring Additional Project Settings > Options Tab > Data Protection.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan