AVEVA PI Connector EUVD-2025-18217

| CVE-2025-4418 MEDIUM
Improper Validation of Integrity Check Value (CWE-354)
2025-06-12 [email protected]
Information Disclosure
4.4
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Analysis Generated
Mar 14, 2026 - 21:20 vuln.today
EUVD ID Assigned
Mar 14, 2026 - 21:20 euvd
EUVD-2025-18217
CVE Published
Jun 12, 2025 - 20:15 nvd
MEDIUM 4.4

DescriptionNVD

An improper validation of integrity check value vulnerability exists in

AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files (cache and buffers) in a way that causes the connector service to become unresponsive.

AnalysisAI

A privilege escalation vulnerability in AVEVA PI Connector for CygNet (CVSS 4.4) that allows a miscreant with elevated privileges. Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type: privilege escalation. Affects AVEVA PI Connector for CygNet.

RemediationAI

Monitor vendor channels for patch availability.

Share

EUVD-2025-18217 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy