VULNERABILITY INTELLIGENCE

CVE-2025-61943

CVSS score8.4 HIGH
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-01-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Description

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper with queries in Captive Historian and achieve code execution under SQL Server administrative privileges, potentially resulting in complete compromise of the SQL Server.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-89

Primary references