CVE-2025-65118criticalCWE-427

CVE-2025-65118: fallo crítico en AVEVA Process Optimization

AVEVA Process Optimization Uncontrolled Search Path Element

Publicada el

Seguir esta CVE+ Monitorear Process Optimization

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.3epss 0.3%
The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Productos afectados
AVEVA · Process Optimization
CVEs relacionadas — AVEVA Process Optimization

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-61937CRITICALAVEVA Process Optimization Code InjectionEPSS 1.5%CVE-2025-61943CRITICALAVEVA Process Optimization SQL InjectionEPSS 0.3%CVE-2025-64691CRITICALAVEVA Process Optimization Code InjectionEPSS 0.3%CVE-2025-65117HIGHAVEVA Process Optimization Use of Potentially Dangerous FunctionEPSS 0.2%CVE-2025-64729HIGHAVEVA Process Optimization Missing AuthorizationEPSS 0.2%CVE-2025-64769HIGHAVEVA Process Optimization Cleartext Transmission of Sensitive InformationEPSS 0.2%