← Voltar para CVEs

CVE-2025-65118

HIGH

8.8

Descricao

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server.

Detalhes CVE

Pontuacao CVSS v3.18.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado1/16/2026

Ultima modificacao1/22/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

aveva:process_optimization

Fraquezas (CWE)

CWE-427

Referencias

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json(ics-cert@hq.dhs.gov)

https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea(ics-cert@hq.dhs.gov)

https://www.aveva.com/en/support-and-success/cyber-security-updates/(ics-cert@hq.dhs.gov)

https://www.cisa.gov/news-events/ics-advisories/icsa-26-015-01(ics-cert@hq.dhs.gov)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.