CVE-2025-36539
mediumPriorität · verfolgen · 0EPSS 0.004 · 34. PerzentilDEEUUSEPSS · bewertet 2026-10-27
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenPI Data Archivecisa_csaf_ot
(CVE-2025-44019, CVE-2025-36539) All affected versions of PI Data Archive and PI Server can be fixed by upgrading to PI Server 2024 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select version 2024 or higher.
https://my.osisoft.com/ - BehobenPI Servercisa_csaf_ot
(CVE-2025-44019, CVE-2025-36539) All affected versions of PI Data Archive and PI Server can be fixed by upgrading to PI Server 2024 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select version 2024 or higher.
https://my.osisoft.com/ - MitigationPI Data Archivecisa_csaf_ot
AVEVA further recommends users follow general defensive measures:
- MitigationPI Servercisa_csaf_ot
AVEVA further recommends users follow general defensive measures:
- MitigationFactoryTalk Historian SEcisa_csaf_ot
Mitigations and Workarounds for CVE-2025-36539 & CVE-2025-44109: Customers using the affected software, who are not able to upgrade to one of the corrected versions, should use our security best practices and also consider the following: Monitor liveness of PI Network Manager and PI Archive Subsystem services. Set the PI Network Manager and PI Archive Subsystem services to automatically restart. Limit port 5450 access to trusted workstations and software. For a list of PI System firewall port requirements, see knowledge base article KB01162 - Firewall Port Requirements. For a starting point on PI system security best practices, see knowledge base article KB00833 - Best practices for securing your PI Server.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.9–7.1
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (10)
Betroffene Produkte und Versionsbereiche.
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2026-1982Rockwell Automation FactoryTalk (Historian Site Edition): Mehrere SchwachstellenDeutsch2026-06-16csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk Historian Site Edition ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Daten zu manipulieren.
- ICSA-25-162-07AVEVA PI Data Archive2025-06-12icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could shut down necessary subsystems and cause a denial-of-service condition.
- ICSA-26-169-03Rockwell Automation FactoryTalk Historian Site Edition2026-06-18icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (8)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2025-36539cnnvd
- https://www.aveva.com/en/support-and-success/cyber-security-updates/cnnvd
- https://www.aveva.com/en/support-and-success/myosisoft/Patchcnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07cnnvd
- https://www.aveva.com/en/support-and-success/cyber-security-updates/enisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07enisa_euvd
- https://www.aveva.com/en/support-and-success/cyber-security-updates/nvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07nvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan