VULNERABILITY INTELLIGENCE
CVE-2025-36539
CVSS score6.5 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-248