CVE-2025-4418 | THREATINT

Description

An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files (cache and buffers) in a way that causes the connector service to become unresponsive.

Reserved 2025-05-07 | Published 2025-06-12 | Updated 2025-06-12 | Assigner icscert

MEDIUM: 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

MEDIUM: 6.7CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-354

Product status

Default status

unaffected

Any version

affected

Credits

AVEVA reported these vulnerabilities to CISA. finder

References

www.cisa.gov/news-events/ics-advisories/icsa-25-162-09

www.aveva.com/en/support-and-success/cyber-security-updates/

cve.org (CVE-2025-4418)

nvd.nist.gov (CVE-2025-4418)

Download JSON