7.1

CVE-2025-44019

AVEVA PI Data Archive Uncaught Exception

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if 
exploited, could allow an authenticated user to shut down certain 
necessary PI Data Archive subsystems, resulting in a denial of service. 
Depending on the timing of the crash, data present in snapshots/write 
cache may be lost.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerAVEVA
≫
Produkt PI Data Archive
Default Statusunaffected
Version <= 2018 SP3 Patch 4
Version 0
Status affected
HerstellerAVEVA
≫
Produkt PI Data Archive
Default Statusunaffected
Version 2023
Status affected
HerstellerAVEVA
≫
Produkt PI Data Archive
Default Statusunaffected
Version 2023 Patch 1
Status affected
HerstellerAVEVA
≫
Produkt PI Server
Default Statusunaffected
Version <= 2018 SP3 Patch 6
Version 0
Status affected
HerstellerAVEVA
≫
Produkt PI Server
Default Statusunaffected
Version 2023
Status affected
HerstellerAVEVA
≫
Produkt PI Server
Default Statusunaffected
Version 2023 Patch 1
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.293
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
ics-cert@hq.dhs.gov 7.1 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
ics-cert@hq.dhs.gov 7.1 2.8 4.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CWE-248 Uncaught Exception

An exception is thrown from a function, but it is not caught.