Vulnerability-Lookup

CVE-2025-7639 (GCVE-0-2025-7639)

Vulnerability from cvelistv5 – Published: 2026-08-14 18:46 – Updated: 2026-08-14 22:05

Title

AVEVA Enterprise SCADA Deserialization of Untrusted Data

Summary

The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps".

Severity

6.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 19:31 UTC

CWE

CWE-502

Assigner

icscert

References

3 references

URL	Tags
https://www.aveva.com/content/dam/aveva/documents…
https://www.cisa.gov/news-events/ics-advisories/i…
https://github.com/cisagov/CSAF/blob/develop/csaf…

Impacted products

6 products

Vendor	Product	Version
AVEVA	AVEVA Enterprise SCADA	Affected: 2025 Affected: 2024 , ≤ 2024 SP1 P01 (custom) Affected: 2023 , ≤ 2023 SP1 (custom) Affected: 2022 , ≤ 2022 SP2 P2 (custom) Affected: 0 , ≤ 2021 SP2 P5 (custom) Unaffected: 2025 P1 Unaffected: 2024 SP1 P2 Unaffected: 2023 SP1 P1 Unaffected: 2022 SP2 P3 Unaffected: 2021 SP2 P6
AVEVA	AVEVA Enterprise SCADA HMI	Affected: 2024 Affected: 0 , ≤ 2023_P1 (custom) Affected: 2024 R2 Unaffected: 2024 R2 HF7 Unaffected: 2024 P1 Unaffected: 2023 P2 HF1
AVEVA	AVEVA Pipeline Operations for Gas/Liquids	Unaffected: 2025 P1 Unaffected: 2024 SP1 P2 Unaffected: 2023 SP1 P1 Unaffected: 2022 SP2 P3 Unaffected: 2021 SP2 P6
AVEVA	AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media)	Unaffected: 2025 SP1 P2
AVEVA	AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media)	Unaffected: 2025 SP1 P2
AVEVA	Measurement Advisor	Unaffected: 2025 P1 Unaffected: 2021 SP1 HF16

Credits

AVEVA reported this vulnerability to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-7639",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T19:31:49.732228Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T19:32:00.429Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Enterprise SCADA",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "affected",
              "version": "2025"
            },
            {
              "lessThanOrEqual": "2024 SP1 P01",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2023 SP1",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2022 SP2 P2",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2021 SP2 P5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2025 P1"
            },
            {
              "status": "unaffected",
              "version": "2024 SP1 P2"
            },
            {
              "status": "unaffected",
              "version": "2023 SP1 P1"
            },
            {
              "status": "unaffected",
              "version": "2022 SP2 P3"
            },
            {
              "status": "unaffected",
              "version": "2021 SP2 P6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Enterprise SCADA HMI",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "affected",
              "version": "2024"
            },
            {
              "lessThanOrEqual": "2023_P1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024 R2"
            },
            {
              "status": "unaffected",
              "version": "2024 R2 HF7"
            },
            {
              "status": "unaffected",
              "version": "2024 P1"
            },
            {
              "status": "unaffected",
              "version": "2023 P2 HF1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Pipeline Operations for Gas/Liquids",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "unaffected",
              "version": "2025 P1"
            },
            {
              "status": "unaffected",
              "version": "2024 SP1 P2"
            },
            {
              "status": "unaffected",
              "version": "2023 SP1 P1"
            },
            {
              "status": "unaffected",
              "version": "2022 SP2 P3"
            },
            {
              "status": "unaffected",
              "version": "2021 SP2 P6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media)",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "unaffected",
              "version": "2025 SP1 P2"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media)",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "unaffected",
              "version": "2025 SP1 P2"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Measurement Advisor",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "unaffected",
              "version": "2025 P1"
            },
            {
              "status": "unaffected",
              "version": "2021 SP1 HF16"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "AVEVA reported this vulnerability to CISA."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The vulnerability, if exploited, could allow an authenticated miscreant \nwith \"DNA Authority - Operator\" privilege to tamper with serialized \ndata, potentially resulting in code execution during deserialization \nunder the privilege of Enterprise SCADA security group \"DNA Apps\"."
            }
          ],
          "value": "The vulnerability, if exploited, could allow an authenticated miscreant \nwith \"DNA Authority - Operator\" privilege to tamper with serialized \ndata, potentially resulting in code execution during deserialization \nunder the privilege of Enterprise SCADA security group \"DNA Apps\"."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-14T22:05:54.821Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf"
        },
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-01.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eSecurity Updates\u003c/div\u003e\u003cdiv\u003eContact your AVEVA Technical Support representative, Customer Success Manager, Account Manager, or Solution Integrator to obtain the security update best applicable to the product version currently deployed in your environment:\u003c/div\u003eServers:\u003cbr\u003e\u2022 AVEVA Enterprise SCADA v2025 P1 or higher\u003cbr\u003e\u2022 AVEVA Enterprise SCADA v2024 SP1 P2\u003cbr\u003e\u2022 AVEVA Enterprise SCADA v2023 SP1 P1\u003cbr\u003e\u2022 AVEVA Enterprise SCADA v2022 SP2 P3\u003cbr\u003e\u2022 AVEVA Enterprise SCADA v2021 SP2 P6\u003cbr\u003e\u2022 AVEVA Pipeline Operations for Gas/Liquids v2025 P1 or higher\u003cbr\u003e\u2022 AVEVA Pipeline Operations for Gas/Liquids v2024 SP1 P2\u003cbr\u003e\u2022 AVEVA Pipeline Operations for Gas/Liquids v2023 SP1 P1\u003cbr\u003e\u2022 AVEVA Pipeline Operations for Gas/Liquids v2022 SP2 P3\u003cbr\u003e\u003cdiv\u003e\u2022 AVEVA Pipeline Operations for Gas/Liquids v2021 SP2 P6\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003eClients:\u003cbr\u003e\u2022 AVEVA Enterprise SCADA HMI v2024 R2 HF7 or higher\u003cbr\u003e\u2022 AVEVA Enterprise SCADA HMI v2024 P1\u003cbr\u003e\u2022 AVEVA Enterprise SCADA HMI v2023 P2 HF1\u003cbr\u003e\u2022 AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher\u003cbr\u003e\u2022 AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher\u003cbr\u003e\u2022 Measurement Advisor 2025 P1 or higher\u003cbr\u003e\u2022 Measurement Advisor 2021 SP1 HF16"
            }
          ],
          "value": "Security Updates\n\nContact your AVEVA Technical Support representative, Customer Success Manager, Account Manager, or Solution Integrator to obtain the security update best applicable to the product version currently deployed in your environment:\n\nServers:\n\u2022 AVEVA Enterprise SCADA v2025 P1 or higher\n\u2022 AVEVA Enterprise SCADA v2024 SP1 P2\n\u2022 AVEVA Enterprise SCADA v2023 SP1 P1\n\u2022 AVEVA Enterprise SCADA v2022 SP2 P3\n\u2022 AVEVA Enterprise SCADA v2021 SP2 P6\n\u2022 AVEVA Pipeline Operations for Gas/Liquids v2025 P1 or higher\n\u2022 AVEVA Pipeline Operations for Gas/Liquids v2024 SP1 P2\n\u2022 AVEVA Pipeline Operations for Gas/Liquids v2023 SP1 P1\n\u2022 AVEVA Pipeline Operations for Gas/Liquids v2022 SP2 P3\n\u2022 AVEVA Pipeline Operations for Gas/Liquids v2021 SP2 P6\n\n\n\n\nClients:\n\u2022 AVEVA Enterprise SCADA HMI v2024 R2 HF7 or higher\n\u2022 AVEVA Enterprise SCADA HMI v2024 P1\n\u2022 AVEVA Enterprise SCADA HMI v2023 P2 HF1\n\u2022 AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher\n\u2022 AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher\n\u2022 Measurement Advisor 2025 P1 or higher\n\u2022 Measurement Advisor 2021 SP1 HF16"
        },
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eApply Secure Serialization Settings\u003c/div\u003e\u003cdiv\u003eTo fully mitigate the risk of exploit, the following configuration changes must be implemented after all server and client nodes have been upgraded to compatible versions that support the fix:\u003c/div\u003e\u003cbr\u003eServer Components:\u003cbr\u003e\u2022 Change \u201cBinarySerializer\u201d -\u0026gt; \u201cMode\u201d setting from \u2018Binary Formatter\u2019 to \u2018Json\u2019.\u003cbr\u003e\u2022 Change \u201cBinarySerializer\u201d -\u0026gt; \u201cAcceptBinaryFormattedData\u201d setting from \u2018true\u2019 to \u2018false\u2019.\u003cbr\u003e\u003cdiv\u003e\u2022 Re-cache the XOS Event Handlers assembly\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003eClient Components:\u003cbr\u003e\u2022 Configure clients/products that interface with Enterprise SCADA to only use JSON serialization.\u003cbr\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eHMI:\u003c/div\u003e\u003cdiv\u003e\u2022 Migrate HMI displays\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003eFor step-by-step instructions on where and how to apply these configuration settings, how to migrate HMI displays, compatible server-client versions list, and additional details please refer to \u003ca href=\"https://softwaresupportsp.aveva.com/en-US/knowledge/details/000117814?lang=en_US\"\u003eKB117814 \u201cAVEVA Midstream Product Bulletin \u2013 Removal of Binary Formatter\u201d\u003c/a\u003e."
            }
          ],
          "value": "Apply Secure Serialization Settings\n\nTo fully mitigate the risk of exploit, the following configuration changes must be implemented after all server and client nodes have been upgraded to compatible versions that support the fix:\n\n\nServer Components:\n\u2022 Change \u201cBinarySerializer\u201d -\u003e \u201cMode\u201d setting from \u2018Binary Formatter\u2019 to \u2018Json\u2019.\n\u2022 Change \u201cBinarySerializer\u201d -\u003e \u201cAcceptBinaryFormattedData\u201d setting from \u2018true\u2019 to \u2018false\u2019.\n\u2022 Re-cache the XOS Event Handlers assembly\n\n\n\n\nClient Components:\n\u2022 Configure clients/products that interface with Enterprise SCADA to only use JSON serialization.\n\n\n\nHMI:\n\n\u2022 Migrate HMI displays\n\n\n\n\nFor step-by-step instructions on where and how to apply these configuration settings, how to migrate HMI displays, compatible server-client versions list, and additional details please refer to  KB117814 \u201cAVEVA Midstream Product Bulletin \u2013 Removal of Binary Formatter\u201d https://softwaresupportsp.aveva.com/en-US/knowledge/details/000117814 ."
        },
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "AVEVA recommends that customers using affected product versions should perform the following to mitigate the risk of exploit:\u003cbr\u003e\u003col\u003e\u003cli\u003eEvaluate the impact of these vulnerabilities based on your operational environment, architecture, and product implementation.\u003c/li\u003e\u003cli\u003ePlan an upgrade of Servers and Clients to one of the available fixed versions listed in section \u201cSecurity Updates\u201d.\u003c/li\u003e\u003cli\u003eConfigure Servers and Clients as described in section \u201cApply Secure Serialization Settings\u201d.\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "AVEVA recommends that customers using affected product versions should perform the following to mitigate the risk of exploit:\n  *  Evaluate the impact of these vulnerabilities based on your operational environment, architecture, and product implementation.\n  *  Plan an upgrade of Servers and Clients to one of the available fixed versions listed in section \u201cSecurity Updates\u201d.\n  *  Configure Servers and Clients as described in section \u201cApply Secure Serialization Settings\u201d."
        },
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "For more information on this vulnerability, including security updates, users should see the security bulletin AVEVA-2026-005.\u003cbr\u003e\u003ca href=\"https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf\"\u003ehttps://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf\u003c/a\u003e"
            }
          ],
          "value": "For more information on this vulnerability, including security updates, users should see the security bulletin AVEVA-2026-005.\n https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf"
        }
      ],
      "source": {
        "advisory": "ICSA-26-225-01",
        "discovery": "INTERNAL"
      },
      "title": "AVEVA Enterprise SCADA Deserialization of Untrusted Data",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Defensive Measures and General Considerations\u003cbr\u003eThe following general defensive measures are recommended:\u003cbr\u003e- Audit devices, network topology, and perimeter defences to ensure all applicable security best practices from AVEVA\u2019s Enterprise SCADA Reference System Architecture are adhered to.\u003cbr\u003e- Audit assigned permissions to ensure that only trusted users are given \u003ca href=\"https://docs.aveva.com/bundle/scada-ent-2025/page/653520.html\"\u003e\u201cDNA Authority \u2013 Operator\u201d\u003c/a\u003e rights: \u003ca href=\"https://docs.aveva.com/bundle/scada-ent-2025/page/651008.html\"\u003ehttps://docs.aveva.com/bundle/scada-ent-2025/page/651008.html\u003c/a\u003e\u003cbr\u003e- Disallow BLT Test clients in production environments.\u003cbr\u003eFor additional details on defensive measures, please refer to Section 5 of \u003ca href=\"https://softwaresupportsp.aveva.com/en-US/knowledge/details/000117814?lang=en_US\"\u003eKB117814 \u201cAVEVA Midstream Product Bulletin \u2013 Removal of Binary Formatter\u201d\u003c/a\u003e."
            }
          ],
          "value": "Defensive Measures and General Considerations\nThe following general defensive measures are recommended:\n- Audit devices, network topology, and perimeter defences to ensure all applicable security best practices from AVEVA\u2019s Enterprise SCADA Reference System Architecture are adhered to.\n- Audit assigned permissions to ensure that only trusted users are given  https://docs.aveva.com/bundle/scada-ent-2025/page/651008.html \n- Disallow BLT Test clients in production environments.\nFor additional details on defensive measures, please refer to Section 5 of  KB117814 \u201cAVEVA Midstream Product Bulletin \u2013 Removal of Binary Formatter\u201d https://softwaresupportsp.aveva.com/en-US/knowledge/details/000117814 ."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2025-7639",
    "datePublished": "2026-08-14T18:46:18.583Z",
    "dateReserved": "2025-07-14T14:27:04.249Z",
    "dateUpdated": "2026-08-14T22:05:54.821Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-7639\",\"sourceIdentifier\":\"ics-cert@hq.dhs.gov\",\"published\":\"2026-08-14T19:17:13.380\",\"lastModified\":\"2026-08-14T22:16:33.127\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The vulnerability, if exploited, could allow an authenticated miscreant \\nwith \\\"DNA Authority - Operator\\\" privilege to tamper with serialized \\ndata, potentially resulting in code execution during deserialization \\nunder the privilege of Enterprise SCADA security group \\\"DNA Apps\\\".\"}],\"affected\":[{\"source\":\"ics-cert@hq.dhs.gov\",\"affectedData\":[{\"vendor\":\"AVEVA\",\"product\":\"AVEVA Enterprise SCADA\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"2025\",\"status\":\"affected\"},{\"version\":\"2024\",\"lessThanOrEqual\":\"2024 SP1 P01\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"2023\",\"lessThanOrEqual\":\"2023 SP1\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"2022\",\"lessThanOrEqual\":\"2022 SP2 P2\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThanOrEqual\":\"2021 SP2 P5\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"2025 P1\",\"status\":\"unaffected\"},{\"version\":\"2024 SP1 P2\",\"status\":\"unaffected\"},{\"version\":\"2023 SP1 P1\",\"status\":\"unaffected\"},{\"version\":\"2022 SP2 P3\",\"status\":\"unaffected\"},{\"version\":\"2021 SP2 P6\",\"status\":\"unaffected\"}]},{\"vendor\":\"AVEVA\",\"product\":\"AVEVA Enterprise SCADA HMI\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"2024\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThanOrEqual\":\"2023_P1\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"2024 R2\",\"status\":\"affected\"},{\"version\":\"2024 R2 HF7\",\"status\":\"unaffected\"},{\"version\":\"2024 P1\",\"status\":\"unaffected\"},{\"version\":\"2023 P2 HF1\",\"status\":\"unaffected\"}]},{\"vendor\":\"AVEVA\",\"product\":\"AVEVA Pipeline Operations for Gas/Liquids\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"2025 P1\",\"status\":\"unaffected\"},{\"version\":\"2024 SP1 P2\",\"status\":\"unaffected\"},{\"version\":\"2023 SP1 P1\",\"status\":\"unaffected\"},{\"version\":\"2022 SP2 P3\",\"status\":\"unaffected\"},{\"version\":\"2021 SP2 P6\",\"status\":\"unaffected\"}]},{\"vendor\":\"AVEVA\",\"product\":\"AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media)\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"2025 SP1 P2\",\"status\":\"unaffected\"}]},{\"vendor\":\"AVEVA\",\"product\":\"AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media)\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"2025 SP1 P2\",\"status\":\"unaffected\"}]},{\"vendor\":\"AVEVA\",\"product\":\"Measurement Advisor\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"2025 P1\",\"status\":\"unaffected\"},{\"version\":\"2021 SP1 HF16\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"ics-cert@hq.dhs.gov\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-14T19:31:49.732228Z\",\"id\":\"CVE-2025-7639\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"ics-cert@hq.dhs.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-502\"}]}],\"references\":[{\"url\":\"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-01.json\",\"source\":\"ics-cert@hq.dhs.gov\"},{\"url\":\"https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf\",\"source\":\"ics-cert@hq.dhs.gov\"},{\"url\":\"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01\",\"source\":\"ics-cert@hq.dhs.gov\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-7639\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-14T19:31:49.732228Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-14T19:31:55.696Z\"}}], \"cna\": {\"title\": \"AVEVA Enterprise SCADA Deserialization of Untrusted Data\", \"source\": {\"advisory\": \"ICSA-26-225-01\", \"discovery\": \"INTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"AVEVA reported this vulnerability to CISA.\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 10, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"HIGH\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"AVEVA\", \"product\": \"AVEVA Enterprise SCADA\", \"versions\": [{\"status\": \"affected\", \"version\": \"2025\"}, {\"status\": \"affected\", \"version\": \"2024\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2024 SP1 P01\"}, {\"status\": \"affected\", \"version\": \"2023\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2023 SP1\"}, {\"status\": \"affected\", \"version\": \"2022\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2022 SP2 P2\"}, {\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2021 SP2 P5\"}, {\"status\": \"unaffected\", \"version\": \"2025 P1\"}, {\"status\": \"unaffected\", \"version\": \"2024 SP1 P2\"}, {\"status\": \"unaffected\", \"version\": \"2023 SP1 P1\"}, {\"status\": \"unaffected\", \"version\": \"2022 SP2 P3\"}, {\"status\": \"unaffected\", \"version\": \"2021 SP2 P6\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AVEVA\", \"product\": \"AVEVA Enterprise SCADA HMI\", \"versions\": [{\"status\": \"affected\", \"version\": \"2024\"}, {\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2023_P1\"}, {\"status\": \"affected\", \"version\": \"2024 R2\"}, {\"status\": \"unaffected\", \"version\": \"2024 R2 HF7\"}, {\"status\": \"unaffected\", \"version\": \"2024 P1\"}, {\"status\": \"unaffected\", \"version\": \"2023 P2 HF1\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AVEVA\", \"product\": \"AVEVA Pipeline Operations for Gas/Liquids\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2025 P1\"}, {\"status\": \"unaffected\", \"version\": \"2024 SP1 P2\"}, {\"status\": \"unaffected\", \"version\": \"2023 SP1 P1\"}, {\"status\": \"unaffected\", \"version\": \"2022 SP2 P3\"}, {\"status\": \"unaffected\", \"version\": \"2021 SP2 P6\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AVEVA\", \"product\": \"AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media)\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2025 SP1 P2\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AVEVA\", \"product\": \"AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media)\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2025 SP1 P2\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"AVEVA\", \"product\": \"Measurement Advisor\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2025 P1\"}, {\"status\": \"unaffected\", \"version\": \"2021 SP1 HF16\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Security Updates\\n\\nContact your AVEVA Technical Support representative, Customer Success Manager, Account Manager, or Solution Integrator to obtain the security update best applicable to the product version currently deployed in your environment:\\n\\nServers:\\n\\u2022 AVEVA Enterprise SCADA v2025 P1 or higher\\n\\u2022 AVEVA Enterprise SCADA v2024 SP1 P2\\n\\u2022 AVEVA Enterprise SCADA v2023 SP1 P1\\n\\u2022 AVEVA Enterprise SCADA v2022 SP2 P3\\n\\u2022 AVEVA Enterprise SCADA v2021 SP2 P6\\n\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2025 P1 or higher\\n\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2024 SP1 P2\\n\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2023 SP1 P1\\n\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2022 SP2 P3\\n\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2021 SP2 P6\\n\\n\\n\\n\\nClients:\\n\\u2022 AVEVA Enterprise SCADA HMI v2024 R2 HF7 or higher\\n\\u2022 AVEVA Enterprise SCADA HMI v2024 P1\\n\\u2022 AVEVA Enterprise SCADA HMI v2023 P2 HF1\\n\\u2022 AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher\\n\\u2022 AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher\\n\\u2022 Measurement Advisor 2025 P1 or higher\\n\\u2022 Measurement Advisor 2021 SP1 HF16\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cdiv\u003eSecurity Updates\u003c/div\u003e\u003cdiv\u003eContact your AVEVA Technical Support representative, Customer Success Manager, Account Manager, or Solution Integrator to obtain the security update best applicable to the product version currently deployed in your environment:\u003c/div\u003eServers:\u003cbr\u003e\\u2022 AVEVA Enterprise SCADA v2025 P1 or higher\u003cbr\u003e\\u2022 AVEVA Enterprise SCADA v2024 SP1 P2\u003cbr\u003e\\u2022 AVEVA Enterprise SCADA v2023 SP1 P1\u003cbr\u003e\\u2022 AVEVA Enterprise SCADA v2022 SP2 P3\u003cbr\u003e\\u2022 AVEVA Enterprise SCADA v2021 SP2 P6\u003cbr\u003e\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2025 P1 or higher\u003cbr\u003e\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2024 SP1 P2\u003cbr\u003e\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2023 SP1 P1\u003cbr\u003e\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2022 SP2 P3\u003cbr\u003e\u003cdiv\u003e\\u2022 AVEVA Pipeline Operations for Gas/Liquids v2021 SP2 P6\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003eClients:\u003cbr\u003e\\u2022 AVEVA Enterprise SCADA HMI v2024 R2 HF7 or higher\u003cbr\u003e\\u2022 AVEVA Enterprise SCADA HMI v2024 P1\u003cbr\u003e\\u2022 AVEVA Enterprise SCADA HMI v2023 P2 HF1\u003cbr\u003e\\u2022 AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher\u003cbr\u003e\\u2022 AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher\u003cbr\u003e\\u2022 Measurement Advisor 2025 P1 or higher\u003cbr\u003e\\u2022 Measurement Advisor 2021 SP1 HF16\", \"base64\": false}]}, {\"lang\": \"en\", \"value\": \"Apply Secure Serialization Settings\\n\\nTo fully mitigate the risk of exploit, the following configuration changes must be implemented after all server and client nodes have been upgraded to compatible versions that support the fix:\\n\\n\\nServer Components:\\n\\u2022 Change \\u201cBinarySerializer\\u201d -\u003e \\u201cMode\\u201d setting from \\u2018Binary Formatter\\u2019 to \\u2018Json\\u2019.\\n\\u2022 Change \\u201cBinarySerializer\\u201d -\u003e \\u201cAcceptBinaryFormattedData\\u201d setting from \\u2018true\\u2019 to \\u2018false\\u2019.\\n\\u2022 Re-cache the XOS Event Handlers assembly\\n\\n\\n\\n\\nClient Components:\\n\\u2022 Configure clients/products that interface with Enterprise SCADA to only use JSON serialization.\\n\\n\\n\\nHMI:\\n\\n\\u2022 Migrate HMI displays\\n\\n\\n\\n\\nFor step-by-step instructions on where and how to apply these configuration settings, how to migrate HMI displays, compatible server-client versions list, and additional details please refer to  KB117814 \\u201cAVEVA Midstream Product Bulletin \\u2013 Removal of Binary Formatter\\u201d https://softwaresupportsp.aveva.com/en-US/knowledge/details/000117814 .\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cdiv\u003eApply Secure Serialization Settings\u003c/div\u003e\u003cdiv\u003eTo fully mitigate the risk of exploit, the following configuration changes must be implemented after all server and client nodes have been upgraded to compatible versions that support the fix:\u003c/div\u003e\u003cbr\u003eServer Components:\u003cbr\u003e\\u2022 Change \\u201cBinarySerializer\\u201d -\u0026gt; \\u201cMode\\u201d setting from \\u2018Binary Formatter\\u2019 to \\u2018Json\\u2019.\u003cbr\u003e\\u2022 Change \\u201cBinarySerializer\\u201d -\u0026gt; \\u201cAcceptBinaryFormattedData\\u201d setting from \\u2018true\\u2019 to \\u2018false\\u2019.\u003cbr\u003e\u003cdiv\u003e\\u2022 Re-cache the XOS Event Handlers assembly\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003eClient Components:\u003cbr\u003e\\u2022 Configure clients/products that interface with Enterprise SCADA to only use JSON serialization.\u003cbr\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eHMI:\u003c/div\u003e\u003cdiv\u003e\\u2022 Migrate HMI displays\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003eFor step-by-step instructions on where and how to apply these configuration settings, how to migrate HMI displays, compatible server-client versions list, and additional details please refer to \u003ca href=\\\"https://softwaresupportsp.aveva.com/en-US/knowledge/details/000117814?lang=en_US\\\"\u003eKB117814 \\u201cAVEVA Midstream Product Bulletin \\u2013 Removal of Binary Formatter\\u201d\u003c/a\u003e.\", \"base64\": false}]}, {\"lang\": \"en\", \"value\": \"AVEVA recommends that customers using affected product versions should perform the following to mitigate the risk of exploit:\\n  *  Evaluate the impact of these vulnerabilities based on your operational environment, architecture, and product implementation.\\n  *  Plan an upgrade of Servers and Clients to one of the available fixed versions listed in section \\u201cSecurity Updates\\u201d.\\n  *  Configure Servers and Clients as described in section \\u201cApply Secure Serialization Settings\\u201d.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"AVEVA recommends that customers using affected product versions should perform the following to mitigate the risk of exploit:\u003cbr\u003e\u003col\u003e\u003cli\u003eEvaluate the impact of these vulnerabilities based on your operational environment, architecture, and product implementation.\u003c/li\u003e\u003cli\u003ePlan an upgrade of Servers and Clients to one of the available fixed versions listed in section \\u201cSecurity Updates\\u201d.\u003c/li\u003e\u003cli\u003eConfigure Servers and Clients as described in section \\u201cApply Secure Serialization Settings\\u201d.\u003c/li\u003e\u003c/ol\u003e\", \"base64\": false}]}, {\"lang\": \"en\", \"value\": \"For more information on this vulnerability, including security updates, users should see the security bulletin AVEVA-2026-005.\\n https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"For more information on this vulnerability, including security updates, users should see the security bulletin AVEVA-2026-005.\u003cbr\u003e\u003ca href=\\\"https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf\\\"\u003ehttps://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf\u003c/a\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf\"}, {\"url\": \"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01\"}, {\"url\": \"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-01.json\"}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Defensive Measures and General Considerations\\nThe following general defensive measures are recommended:\\n- Audit devices, network topology, and perimeter defences to ensure all applicable security best practices from AVEVA\\u2019s Enterprise SCADA Reference System Architecture are adhered to.\\n- Audit assigned permissions to ensure that only trusted users are given  https://docs.aveva.com/bundle/scada-ent-2025/page/651008.html \\n- Disallow BLT Test clients in production environments.\\nFor additional details on defensive measures, please refer to Section 5 of  KB117814 \\u201cAVEVA Midstream Product Bulletin \\u2013 Removal of Binary Formatter\\u201d https://softwaresupportsp.aveva.com/en-US/knowledge/details/000117814 .\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Defensive Measures and General Considerations\u003cbr\u003eThe following general defensive measures are recommended:\u003cbr\u003e- Audit devices, network topology, and perimeter defences to ensure all applicable security best practices from AVEVA\\u2019s Enterprise SCADA Reference System Architecture are adhered to.\u003cbr\u003e- Audit assigned permissions to ensure that only trusted users are given \u003ca href=\\\"https://docs.aveva.com/bundle/scada-ent-2025/page/653520.html\\\"\u003e\\u201cDNA Authority \\u2013 Operator\\u201d\u003c/a\u003e rights: \u003ca href=\\\"https://docs.aveva.com/bundle/scada-ent-2025/page/651008.html\\\"\u003ehttps://docs.aveva.com/bundle/scada-ent-2025/page/651008.html\u003c/a\u003e\u003cbr\u003e- Disallow BLT Test clients in production environments.\u003cbr\u003eFor additional details on defensive measures, please refer to Section 5 of \u003ca href=\\\"https://softwaresupportsp.aveva.com/en-US/knowledge/details/000117814?lang=en_US\\\"\u003eKB117814 \\u201cAVEVA Midstream Product Bulletin \\u2013 Removal of Binary Formatter\\u201d\u003c/a\u003e.\", \"base64\": false}]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"The vulnerability, if exploited, could allow an authenticated miscreant \\nwith \\\"DNA Authority - Operator\\\" privilege to tamper with serialized \\ndata, potentially resulting in code execution during deserialization \\nunder the privilege of Enterprise SCADA security group \\\"DNA Apps\\\".\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"The vulnerability, if exploited, could allow an authenticated miscreant \\nwith \\\"DNA Authority - Operator\\\" privilege to tamper with serialized \\ndata, potentially resulting in code execution during deserialization \\nunder the privilege of Enterprise SCADA security group \\\"DNA Apps\\\".\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-502\", \"description\": \"CWE-502\"}]}], \"providerMetadata\": {\"orgId\": \"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6\", \"shortName\": \"icscert\", \"dateUpdated\": \"2026-08-14T18:46:18.583Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-7639\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-14T19:32:00.429Z\", \"dateReserved\": \"2025-07-14T14:27:04.249Z\", \"assignerOrgId\": \"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6\", \"datePublished\": \"2026-08-14T18:46:18.583Z\", \"assignerShortName\": \"icscert\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2025-7639

Vulnerability from fkie_nvd - Published: 2026-08-14 19:17 - Updated: 2026-08-14 22:16

Severity

6.1 (Medium) - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

Summary

References

	URL	Tags
	ics-cert@hq.dhs.gov	https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-01.json
	ics-cert@hq.dhs.gov	https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf
	ics-cert@hq.dhs.gov	https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Enterprise SCADA",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "affected",
              "version": "2025"
            },
            {
              "lessThanOrEqual": "2024 SP1 P01",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2023 SP1",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2022 SP2 P2",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2021 SP2 P5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2025 P1"
            },
            {
              "status": "unaffected",
              "version": "2024 SP1 P2"
            },
            {
              "status": "unaffected",
              "version": "2023 SP1 P1"
            },
            {
              "status": "unaffected",
              "version": "2022 SP2 P3"
            },
            {
              "status": "unaffected",
              "version": "2021 SP2 P6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Enterprise SCADA HMI",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "affected",
              "version": "2024"
            },
            {
              "lessThanOrEqual": "2023_P1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2024 R2"
            },
            {
              "status": "unaffected",
              "version": "2024 R2 HF7"
            },
            {
              "status": "unaffected",
              "version": "2024 P1"
            },
            {
              "status": "unaffected",
              "version": "2023 P2 HF1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Pipeline Operations for Gas/Liquids",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "unaffected",
              "version": "2025 P1"
            },
            {
              "status": "unaffected",
              "version": "2024 SP1 P2"
            },
            {
              "status": "unaffected",
              "version": "2023 SP1 P1"
            },
            {
              "status": "unaffected",
              "version": "2022 SP2 P3"
            },
            {
              "status": "unaffected",
              "version": "2021 SP2 P6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media)",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "unaffected",
              "version": "2025 SP1 P2"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media)",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "unaffected",
              "version": "2025 SP1 P2"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Measurement Advisor",
          "vendor": "AVEVA",
          "versions": [
            {
              "status": "unaffected",
              "version": "2025 P1"
            },
            {
              "status": "unaffected",
              "version": "2021 SP1 HF16"
            }
          ]
        }
      ],
      "source": "ics-cert@hq.dhs.gov"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The vulnerability, if exploited, could allow an authenticated miscreant \nwith \"DNA Authority - Operator\" privilege to tamper with serialized \ndata, potentially resulting in code execution during deserialization \nunder the privilege of Enterprise SCADA security group \"DNA Apps\"."
    }
  ],
  "id": "CVE-2025-7639",
  "lastModified": "2026-08-14T22:16:33.127",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "HIGH",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "ics-cert@hq.dhs.gov",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-7639",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-14T19:31:49.732228Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-14T19:17:13.380",
  "references": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-01.json"
    },
    {
      "source": "ics-cert@hq.dhs.gov",
      "url": "https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf"
    },
    {
      "source": "ics-cert@hq.dhs.gov",
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01"
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ],
      "source": "ics-cert@hq.dhs.gov",
      "type": "Secondary"
    }
  ]
}

GHSA-4M9V-7GG3-M6J6

Vulnerability from github – Published: 2026-08-14 21:31 – Updated: 2026-08-14 21:31

Details

Severity

10.0 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-7639"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-14T19:17:13Z",
    "severity": "CRITICAL"
  },
  "details": "The vulnerability, if exploited, could allow an authenticated miscreant \nwith \"DNA Authority - Operator\" privilege to tamper with serialized \ndata, potentially resulting in code execution during deserialization \nunder the privilege of Enterprise SCADA security group \"DNA Apps\".",
  "id": "GHSA-4m9v-7gg3-m6j6",
  "modified": "2026-08-14T21:31:32Z",
  "published": "2026-08-14T21:31:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7639"
    },
    {
      "type": "WEB",
      "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-01.json"
    },
    {
      "type": "WEB",
      "url": "https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

ICSA-26-225-01

Vulnerability from csaf_cisa - Published: 2026-08-13 06:00 - Updated: 2026-08-13 06:00

Summary

AVEVA Enterprise SCADA

Notes

Legal Notice and Terms of Use: This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).

Advisory Summary: Successful exploitation of this vulnerability could allow an attacker to tamper with serialized data, potentially resulting in code execution during deserialization.

Critical infrastructure sectors: Critical Manufacturing

Countries/areas deployed: Worldwide

Company headquarters location: United Kingdom

Recommended Practices: CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Recommended Practices: CISA also recommends users take the following measures to protect themselves from social engineering attacks. Do not click web links or open attachments in unsolicited email messages. Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams. Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.

Recommended Practices: No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability has a high attack complexity.

CVE-2025-7639

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

CWE-502 - Deserialization of Untrusted Data

Affected products

Known affected 7 products

Product	Version	Remediation
AVEVA Enterprise SCADA: 2025 AVEVA / Enterprise SCADA	2025	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix Mitigation fix Mitigation fix
AVEVA Enterprise SCADA: >=2024\|<=2024_SP1_P01 AVEVA / Enterprise SCADA	>=2024\|<=2024_SP1_P01	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix Mitigation fix Mitigation fix
AVEVA Enterprise SCADA: >=2023\|<=2023_SP1 AVEVA / Enterprise SCADA	>=2023\|<=2023_SP1	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix Mitigation fix Mitigation fix
AVEVA Enterprise SCADA: >=2022\|<=2022_SP2_P2 AVEVA / Enterprise SCADA	>=2022\|<=2022_SP2_P2	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix Mitigation fix Mitigation fix
AVEVA Enterprise SCADA: <=2021_SP2_P5 AVEVA / Enterprise SCADA	<=2021_SP2_P5	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix Mitigation fix Mitigation fix
AVEVA Enterprise SCADA HMI: 2024\|2024_R2 AVEVA / Enterprise SCADA HMI	2024\|2024\|R2	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix Mitigation fix Mitigation fix
AVEVA Enterprise SCADA HMI: <=2023_P1 AVEVA / Enterprise SCADA HMI	<=2023_P1	Mitigation Mitigation Mitigation Mitigation Mitigation Mitigation fix Mitigation fix Mitigation fix

References

16 references

URL	Category
https://raw.githubusercontent.com/cisagov/CSAF/de…	self
https://www.cisa.gov/news-events/ics-advisories/i…	self
https://www.cisa.gov/resources-tools/resources/ic…	external
https://www.cisa.gov/sites/default/files/publicat…	external
https://www.cisa.gov/topics/industrial-control-systems	external
https://www.cisa.gov/uscert/sites/default/files/p…	external
https://www.cisa.gov/uscert/ncas/tips/ST04-014	external
https://www.cisa.gov/news-events/ics-alerts/ics-a…	external
https://www.cisa.gov/sites/default/files/recommen…	external
https://www.cisa.gov/news-events/news/targeted-cy…	external
https://www.cisa.gov/secure-our-world/teach-emplo…	external
https://www.cisa.gov/news-events/news/avoiding-so…	external
https://cwe.mitre.org/data/definitions/502.html	external
https://www.cve.org/CVERecord?id=CVE-2025-7639	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external
https://www.first.org/cvss/calculator/4.0#CVSS:4.…	external

Acknowledgments

AVEVA

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "AVEVA",
        "summary": "reported this vulnerability to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy \u0026 Use policy (https://www.cisa.gov/privacy-policy).",
        "title": "Legal Notice and Terms of Use"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of this vulnerability could allow an attacker to tamper with serialized data, potentially resulting in code execution during deserialization.",
        "title": "Advisory Summary"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "United Kingdom",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also recommends users take the following measures to protect themselves from social engineering attacks. Do not click web links or open attachments in unsolicited email messages. Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams. Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability has a high attack complexity.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-26-225-01 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-225-01.json"
      },
      {
        "category": "self",
        "summary": "ICSA Advisory ICSA-26-225-01 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks"
      }
    ],
    "title": "AVEVA Enterprise SCADA",
    "tracking": {
      "current_release_date": "2026-08-13T06:00:00.000000Z",
      "generator": {
        "date": "2026-08-06T18:54:09.696882Z",
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-26-225-01",
      "initial_release_date": "2026-08-13T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2026-08-13T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Republication of AVEVA security bulletin AVEVA-2026-005"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2025",
                "product": {
                  "name": "AVEVA Enterprise SCADA: 2025",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise SCADA"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=2024|\u003c=2024_SP1_P01",
                "product": {
                  "name": "AVEVA Enterprise SCADA: \u003e=2024|\u003c=2024_SP1_P01",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise SCADA"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=2023|\u003c=2023_SP1",
                "product": {
                  "name": "AVEVA Enterprise SCADA: \u003e=2023|\u003c=2023_SP1",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise SCADA"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=2022|\u003c=2022_SP2_P2",
                "product": {
                  "name": "AVEVA Enterprise SCADA: \u003e=2022|\u003c=2022_SP2_P2",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise SCADA"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=2021_SP2_P5",
                "product": {
                  "name": "AVEVA Enterprise SCADA: \u003c=2021_SP2_P5",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise SCADA"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "2024|2024|R2",
                "product": {
                  "name": "AVEVA Enterprise SCADA HMI: 2024|2024_R2",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise SCADA HMI"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=2023_P1",
                "product": {
                  "name": "AVEVA Enterprise SCADA HMI: \u003c=2023_P1",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise SCADA HMI"
          }
        ],
        "category": "vendor",
        "name": "AVEVA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-7639",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The vulnerability, if exploited, could allow an authenticated miscreant with \"DNA Authority - Operator\" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group \"DNA Apps\".",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "cwe.mitre.org",
          "url": "https://cwe.mitre.org/data/definitions/502.html"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-7639"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "AVEVA recommends that customers using affected product versions should perform the following to mitigate the risk of exploit: \n 1. Evaluate the impact of these vulnerabilities based on your operational environment, architecture, and product implementation. \n 2. Plan an upgrade of Servers and Clients to one of the available fixed versions listed in this document. \n 3. Configure Servers and Clients as described in this document.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007"
          ]
        },
        {
          "category": "mitigation",
          "details": "Contact your AVEVA Technical Support representative, Customer Success Manager, Account Manager, or Solution Integrator to obtain the security update best applicable to the product version currently deployed in your environment: \n Servers: \n AVEVA Enterprise SCADA v2025 P1 or higher, \n AVEVA Enterprise SCADA v2024 SP1 P2, \n AVEVA Enterprise SCADA v2023 SP1 P1, \n AVEVA Enterprise SCADA v2022 SP2 P3, \n AVEVA Enterprise SCADA v2021 SP2 P6, \n AVEVA Pipeline Operations for Gas/Liquids v2025 P1 or higher, \n AVEVA Pipeline Operations for Gas/Liquids v2024 SP1 P2, \n AVEVA Pipeline Operations for Gas/Liquids v2023 SP1 P1, \n AVEVA Pipeline Operations for Gas/Liquids v2022 SP2 P3, \n AVEVA Pipeline Operations for Gas/Liquids v2021 SP2 P6 \n\n Clients: \n AVEVA Enterprise SCADA HMI v2024 R2 HF7 or higher, \n AVEVA Enterprise SCADA HMI v2024 P1, \n AVEVA Enterprise SCADA HMI v2023 P2 HF1, \n AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher, \n AVEVA Pipeline Training Simulator (delivered on Pipeline Simulation media) v2025 SP1 P2 or higher, \n Measurement Advisor 2025 P1 or higher, \n Measurement Advisor 2021 SP1 HF16",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007"
          ]
        },
        {
          "category": "mitigation",
          "details": "To fully mitigate the risk of exploit, the following configuration changes must be implemented after all server and client nodes have been upgraded to compatible versions that support the fix:Server Components: \n Change \"BinarySerializer\" -\u003e \"Mode\" setting from \u0027Binary Formatter\u0027 to \u0027Json\u0027. Change \"BinarySerializer\" -\u003e \"AcceptBinaryFormattedData\" setting from \u0027true\u0027 to \u0027false\u0027. \n Re-cache the XOS Event Handlers assembly",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007"
          ]
        },
        {
          "category": "mitigation",
          "details": "Client Components: Configure clients/products that interface with Enterprise SCADA to only use JSON serialization.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007"
          ]
        },
        {
          "category": "mitigation",
          "details": "HMI: Migrate HMI displays",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007"
          ]
        },
        {
          "category": "mitigation",
          "details": "For step-by-step instructions on where and how to apply these configuration settings, how to migrate HMI displays, compatible server-client versions list, and additional details please refer to KB117814 \"AVEVA Midstream Product Bulletin - Removal of Binary Formatter\"",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007"
          ],
          "url": "https://softwaresupportsp.aveva.com/en-US/knowledge/details/000117814?lang=en_US"
        },
        {
          "category": "mitigation",
          "details": "AVEVA recommends the following general defensive measures: Audit devices, network topology, and perimeter defences to ensure all applicable security best practices from AVEVA\u0027s Enterprise SCADA Reference System Architecture are adhered to. Audit assigned permissions to ensure that only trusted users are given \"DNA Authority - Operator\" rights: https://docs.aveva.com/bundle/scada-ent-2025/page/651008.html Disallow BLT Test clients in production environmentsFor additional details on defensive measures, refer to Section 5 of KB117814 \"AVEVA Midstream Product Bulletin - Removal of Binary Formatter",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007"
          ],
          "url": "https://docs.aveva.com/bundle/scada-ent-2025/page/651008.html"
        },
        {
          "category": "mitigation",
          "details": "For more information on this vulnerability, including security updates, users should see the security bulletin AVEVA-2026-005.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007"
          ],
          "url": "https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-005.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007"
          ]
        }
      ]
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2025-7639 (GCVE-0-2025-7639)

FKIE_CVE-2025-7639

GHSA-4M9V-7GG3-M6J6

ICSA-26-225-01

Tags

Sightings

Nomenclature