Description (CNA)
The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to create or access publication targets of type Text File or HDFS) to upload and persist files that could potentially be executed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AVEVA / PI Integrator | affected 0 before 2020 R2 SP1 |
CWE
CWE-434
References
- https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-004.pdf
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-224-04
ADP enrichment
No English description supplied.
No references supplied.