CVE-2025-44019
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-06-12

Last updated on: 2025-06-16

Assigner: ICS-CERT

Description
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service. Depending on the timing of the crash, data present in snapshots/write cache may be lost.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-06-12
Last Modified
2025-06-16
Generated
2026-05-07
AI Q&A
2025-06-12
EPSS Evaluated
2026-05-05
NVD
CVE-2025-44019
EUVD
EUVD-2025-18213
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-248 An exception is thrown from a function, but it is not caught.
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :

The impact of this vulnerability includes denial of service due to shutdown of critical PI Data Archive subsystems. Additionally, there is a risk of data loss from snapshots or write cache depending on the timing of the crash.


Can you explain this vulnerability to me?

This vulnerability in AVEVA PI Data Archive products involves an uncaught exception that can be exploited by an authenticated user to shut down certain necessary PI Data Archive subsystems. This shutdown results in a denial of service, and depending on when the crash occurs, data in snapshots or the write cache may be lost.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart