CVE-2025-64769CWE-319

AVEVA Process Optimization Cleartext Transmission of Sensitive Information

High · published January 16, 2026

CVSS v4.0
7.6
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

⚡ Those unencrypted connection channels in the Process Optimization suite? They might as well be sending out invites for a party — and everyone can eavesdrop! 🔥 Think of it like a café with a big open window, where anyone walking by can hear all the juicy conversations happening inside. When data travels unencrypted, it’s just as exposed to prying eyes as that café chatter. An attacker could intercept sensitive data flowing through those unencrypted channels, leading to potential data leakage or hijacking. This could result in unauthorized access to critical information, with devastating consequences for your organization.

Put simply

Think of it like a café with a big open window, where anyone walking by can hear all the juicy conversations happening inside. When data travels unencrypted, it’s just as exposed to prying eyes as that café chatter. The vulnerability arises from connection channels and protocols within the Process Optimization application suite that are not encrypted by default, allowing for man-in-the-middle attacks or passive data inspection.

What to do

An attacker could intercept sensitive data flowing through those unencrypted channels, leading to potential data leakage or hijacking. This could result in unauthorized access to critical information, with devastating consequences for your organization. To safeguard your data, enable encryption on all connection channels immediately. Review your security configurations and ensure all communications are protected. Consider updating to the latest version of the application once an encryption feature has been implemented. You've got this! With these steps, you’ll lock down your data and keep those eavesdroppers at bay! 🛡️

The record
Technical detail
CVSS v4.0
7.6 · HIGH
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00172 · 6.2th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-01-16T00:16Z
EPSS history
Timeline
  • 16 JAN 00:16Z
    AVEVA Process Optimization Cleartext Transmission of Sensitive Information
    cvelistv5