CVE-2025-44019
highpriority · track · 0EPSS 0.005 · 40 %ileDEEURUUSEPSS · scored 2026-10-27
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service. Depending on the timing of the crash, data present in snapshots/write cache may be lost.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedPI Data Archivecisa_csaf_ot
(CVE-2025-44019) PI Data Archive 2018 SP3 Patch 4 and all prior and PI Server 2018 SP3 Patch 6 and all prior can alternatively be fixed by upgrading to PI Server 2018 SP3 Patch 7 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select Version 2018 SP3 Patch 7 or higher.
https://my.osisoft.com/ - FixedPI Servercisa_csaf_ot
(CVE-2025-44019) PI Data Archive 2018 SP3 Patch 4 and all prior and PI Server 2018 SP3 Patch 6 and all prior can alternatively be fixed by upgrading to PI Server 2018 SP3 Patch 7 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select Version 2018 SP3 Patch 7 or higher.
https://my.osisoft.com/ - MitigationPI Data Archivecisa_csaf_ot
AVEVA further recommends users follow general defensive measures:
- MitigationPI Servercisa_csaf_ot
AVEVA further recommends users follow general defensive measures:
- MitigationFactoryTalk Historian SEcisa_csaf_ot
For more information, see Rockwell Automation Security Advisory SD1773 (https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1773.html)
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1773.html
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.1
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (17)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-1982Rockwell Automation FactoryTalk (Historian Site Edition): Mehrere SchwachstellenDeutsch2026-06-16csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk Historian Site Edition ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Daten zu manipulieren.
- ICSA-25-162-07AVEVA PI Data Archive2025-06-12icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could shut down necessary subsystems and cause a denial-of-service condition.
- ICSA-26-169-03Rockwell Automation FactoryTalk Historian Site Edition2026-06-18icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (11)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2025-44019cnnvd
- https://my.osisoft.com/cnnvd
- https://www.aveva.com/en/support-and-success/cyber-security-updates/cnnvd
- https://www.aveva.com/en/support-and-success/myosisoft/Patchcnnvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07cnnvd
- https://my.osisoft.com/enisa_euvd
- https://www.aveva.com/en/support-and-success/cyber-security-updates/enisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan