CVE-2025-36539

MEDIUM

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system. The following ve...

Affects 0 products across 2 vendors.

BCS5.0
CVSS 3.16.5
CVSS v47.1
EPSS0.4%
Percentile28th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-248: CWE-248
◆ SAGE Intelligence — CITED Relevance Research Team

CVE-2025-36539 affects AVEVA PI Data Archive products, allowing an authenticated user to shut down certain subsystems via an uncaught exception, leading to a denial of service.

BSID: BS-2025-GLOBAL-255430-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-36539?
CVE-2025-36539 affects AVEVA PI Data Archive products, allowing an authenticated user to shut down certain subsystems via an uncaught exception, leading to a denial of service.
What is the CVSS score for CVE-2025-36539?
CVE-2025-36539 has CVSS 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS: 0.4%.
Is CVE-2025-36539 actively exploited?
No confirmed active exploitation of CVE-2025-36539 as of 2026-06-22.
How do I remediate CVE-2025-36539?
Priority: MEDIUM. Advisory: https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07
What systems are affected by CVE-2025-36539?
CVE-2025-36539 affects: Aveva, Rockwell Automation.
Vulnerability Details
CVE IDCVE-2025-36539
BSIDBS-2025-GLOBAL-255430-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published2026-06-18
Last Modified2026-06-18
ICS Relevance65%
Weakness (CWE)
CWE-248
Verticals
ICS-OT
SourceNVD
Official Description

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system. The following versions of Rockwell Automation FactoryTalk Historian Site Edition are affected: FactoryTalk Historian SE 11 (CVE-2025-13036) FactoryTalk Historian SE <=11.00 (CVE-2025-44019) FactoryTalk Historian SE <=11.00 (CVE-2025-36539) CVSS Vendor Equipment Vulnerabilities v3 7.7 Rockwell Automation Rockwell Autom

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An authenticated user can exploit an uncaught exception in the AVEVA PI Data Archive software to cause a denial of service by shutting down critical subsystems.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductFixed Version
Aveva &mdash; —
Rockwell Automation &mdash; —
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Threat Intelligence
● Threat Intelligence Validated: July 2026 | Threat Age: 37 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash1da53a5fb3bea3591ba666c691f6f9e81f82852b291a06c7f1ea8d2a24bca85f35aaedff42ce43cd32cb0636fdb28c297fa2c7f35bd8dce3672c422390808a6b
Related CVEs affecting Aveva
CVE-2011-3143 10.0 Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, a... CVE-2025-61937 10.0 The vulnerability, if exploited, could allow an unauthenticated miscreant to... CVE-2022-1467 9.9 Windows OS can be configured to overlay a “language bar” on top of any applic... CVE-2017-5158 9.8 An Information Exposure issue was discovered in Schneider Electric Wonderware... CVE-2018-10620 9.8 AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017...
View all Aveva CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.

Join free →