CVE-2025-64691: AVEVA Process Optimization Code Injection
The vulnerability, if exploited, could allow an authenticated miscreant (OS standard user) to tamper with TCL Macro scripts and escalate privileges to OS system, potentially resulting in complete compromise of the model application server.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64691?
CVE-2025-64691 is considered a critical vulnerability due to the potential for privilege escalation and complete compromise of the application server.
How do I fix CVE-2025-64691?
To fix CVE-2025-64691, apply the latest security patches provided by AVEVA for the Process Optimization software.
Who is affected by CVE-2025-64691?
CVE-2025-64691 affects users of AVEVA Process Optimization versions prior to 2025.
What type of attack does CVE-2025-64691 enable?
CVE-2025-64691 enables authenticated users to tamper with TCL Macro scripts, leading to privilege escalation.
What are the potential consequences of exploiting CVE-2025-64691?
Exploitation of CVE-2025-64691 could lead to a complete compromise of the model application server, affecting data integrity and availability.