Description (CNA)
The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to access publication targets) to retrieve sensitive information that could then be used to gain additional access to downstream resources.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AVEVA / PI Integrator | affected 0 before 2020 R2 SP1 |
CWE
CWE-201
References
- https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-004.pdf
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-224-04
ADP enrichment
No English description supplied.
No references supplied.