Information Disclosure Vulnerability in AVEVA Data Hub
CVE-2025-41415

7.1HIGH

Key Information:

Vendor

Aveva

Status
Pi Integrator
Vendor
CVE Published:
21 August 2025

What is CVE-2025-41415?

AVIVA Data Hub is affected by a vulnerability that potentially enables an authenticated user to access sensitive information related to publication targets. This issue poses risks as attackers with the necessary privileges could exploit the vulnerability to retrieve confidential data, leading to further exploitation of downstream resources. Organizations using AVEVA Data Hub should assess their exposure and implement necessary security measures to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PI Integrator 0 < 2020 R2 SP1

References

https://www.aveva.com/content/dam/aveva/documents/support...
https://www.cisa.gov/news-events/ics-advisories/icsa-25-2...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Maxime Escourbiac, Michelin CERT, and Adam Bertrand, Abicom for Michelin CERT reported these vulnerabilities to AVEVA.
JSON
.