CVE-2025-4418

MEDIUM6.7

AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value

Published Jun 12, 2025

Modified 8 months ago

Details

An improper validation of integrity check value vulnerability exists in

AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files (cache and buffers) in a way that causes the connector service to become unresponsive.

References

WEB

https://www.aveva.com/en/support-and-success/cyber-security-updates/

WEB

https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-09

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-4418

CVSS Analysis

CVSS v4.0

6.7

Exploitability

Attack Vector