CNNVD-202508-2562 Information

CNNVD ID

CNNVD-202508-2562

CVE-2025-41415

  • CNNVD Published: 2025-08-21

Description (Chinese)

AVEVA PI Integrator是英国AVEVA公司的一款商业分析工具。 AVEVA PI Integrator存在安全漏洞,该漏洞源于认证用户可能检索敏感信息,可能导致对下游资源的额外访问。

Description (English)

AVEVA PI Integrator is a business analysis tool for the British company AVEVA. There is a security loophole in AVEVA PI Integrator, which stems from the possibility for authentication users to retrieve sensitive information and may lead to additional access to downstream resources.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

剑维软件

Published

2025-08-21

Last Modified

2026-02-24

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-224-04 https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-004.pdf https://nvd.nist.gov/vuln/detail/CVE-2025-41415

Patch

https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-004.pdf

Share on: