CVE-2025-64769

Katalog CVE

CVSS 7.1 · High EPSS 0,17%

Kerentanan Cleartext Transmission of Sensitive Information pada aveva process optimization. Skor CVSS 3.1 7.1 (High) menurut hq.dhs.gov.

Deskripsi (NVD)

The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted and could become subject to hijacking or data leakage in certain man-in-the-middle or passive inspection scenarios.

Rincian

Terbit di NVD

16 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber hq.dhs.gov
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-319: Cleartext Transmission of Sensitive Information

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 6,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.aveva.com/en/support-and-success/cyber-security-updates/ advisory vendor
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-015-01 advisory pihak ketiga · pemerintah AS
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json advisory pihak ketiga
• https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea permissions required