CVE-2025-36539
mediumpriority · track · 0EPSS 0.004 · 34 %ileDEEUUSEPSS · scored 2026-10-27
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedPI Data Archivecisa_csaf_ot
(CVE-2025-44019, CVE-2025-36539) All affected versions of PI Data Archive and PI Server can be fixed by upgrading to PI Server 2024 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select version 2024 or higher.
https://my.osisoft.com/ - FixedPI Servercisa_csaf_ot
(CVE-2025-44019, CVE-2025-36539) All affected versions of PI Data Archive and PI Server can be fixed by upgrading to PI Server 2024 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select version 2024 or higher.
https://my.osisoft.com/ - MitigationPI Data Archivecisa_csaf_ot
AVEVA further recommends users follow general defensive measures:
- MitigationPI Servercisa_csaf_ot
AVEVA further recommends users follow general defensive measures:
- MitigationFactoryTalk Historian SEcisa_csaf_ot
Mitigations and Workarounds for CVE-2025-36539 & CVE-2025-44109: Customers using the affected software, who are not able to upgrade to one of the corrected versions, should use our security best practices and also consider the following: Monitor liveness of PI Network Manager and PI Archive Subsystem services. Set the PI Network Manager and PI Archive Subsystem services to automatically restart. Limit port 5450 access to trusted workstations and software. For a list of PI System firewall port requirements, see knowledge base article KB01162 - Firewall Port Requirements. For a starting point on PI system security best practices, see knowledge base article KB00833 - Best practices for securing your PI Server.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.9–7.1
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (10)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-1982Rockwell Automation FactoryTalk (Historian Site Edition): Mehrere SchwachstellenDeutsch2026-06-16csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk Historian Site Edition ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Daten zu manipulieren.
- ICSA-25-162-07AVEVA PI Data Archive2025-06-12icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could shut down necessary subsystems and cause a denial-of-service condition.
- ICSA-26-169-03Rockwell Automation FactoryTalk Historian Site Edition2026-06-18icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2025-36539cnnvd
- https://www.aveva.com/en/support-and-success/cyber-security-updates/cnnvd
- https://www.aveva.com/en/support-and-success/myosisoft/Patchcnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07cnnvd
- https://www.aveva.com/en/support-and-success/cyber-security-updates/enisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07enisa_euvd
- https://www.aveva.com/en/support-and-success/cyber-security-updates/nvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07nvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan