Brute Force Vulnerability in PIMBoards by AVEVA
CVE-2026-81822
8.3HIGH
What is CVE-2026-81822?
A vulnerability in AVEVA's PIMBoards allows attackers with read access to project files to potentially reverse engineer user passwords stored in weakly hashed formats. By employing computational brute-forcing techniques, malicious actors could gain unauthorized access and privilege escalation, compromising the integrity of PIMBoards accounts and enabling them to impersonate administrators.
Affected Version(s)
Pipeline Integrity Monitor 0
References
CVSS V4
Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Self-discovered and self-reported in accordance with AVEVA’s Ethical Disclosure Policy to inform administrators of potential risks, so that they can take actions to minimize the effects of the vulnerabilities.