CVE-2025-4418CWE-354

AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value

Medium · published June 12, 2025

CVSS v4.0
6.7
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

An improper validation of integrity check value vulnerability exists in

AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited,

could allow a miscreant with elevated privileges to modify PI Connector

for CygNet local data files (cache and buffers) in a way that causes the

connector service to become unresponsive.

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00101 · 0.9th percentile
Weakness
CWE-354 · Improper Validation of Integrity Check Value
Published
2025-06-12T19:37Z
EPSS history
Timeline
  • 12 JUN 19:37Z
    AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value
    cvelistv5