CVE-2025-44019

HIGH

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system. The following ve...

Affects 0 products across 2 vendors.

BCS5.34
CVSS 3.17.1
CVSS v47.1
EPSS0.4%
Percentile30th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, full availability impact.
CWE Weakness Definitions
CWE-248: CWE-248
◆ SAGE Intelligence — CITED Relevance Research Team

CVE-2025-44019 affects AVEVA PI Data Archive products, allowing an authenticated user to cause a denial of service by exploiting an uncaught exception. This can lead to the shutdown of necessary subsystems and potential data loss from snapshots/write cache. The CVSS score is 7.1, indicating a high impact on availability and a low impact on integrity. No public PoC or known exploits exist, and the EPSS score is very low, suggesting minimal likelihood of exploitation in the wild.

BSID: BS-2025-GLOBAL-038848-H • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-44019?
CVE-2025-44019 affects AVEVA PI Data Archive products, allowing an authenticated user to cause a denial of service by exploiting an uncaught exception. This can lead to the shutdown of necessary subsystems and potential data loss from snapshots/write cache. The CVSS score is 7.1, indicating a high impact on availability and a low impact on integrity. No public PoC or known exploits exist, and the EPSS score is very low, suggesting minimal likelihood of exploitation in the wild.
What is the CVSS score for CVE-2025-44019?
CVE-2025-44019 has CVSS 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H. EPSS: 0.4%.
Is CVE-2025-44019 actively exploited?
No confirmed active exploitation of CVE-2025-44019 as of 2026-06-22.
How do I remediate CVE-2025-44019?
Priority: MEDIUM. Advisory: https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-07
What systems are affected by CVE-2025-44019?
CVE-2025-44019 affects: Aveva, Rockwell Automation.
What NERC-CIP standard applies to CVE-2025-44019?
NERC CIP CIP-007 CIP-007-R2: This CVE violates CIP-007-R2 as it allows an authenticated user to cause a denial of service, which can impact the availability of critical systems and data.
What IEC 62443 requirement maps to CVE-2025-44019?
IEC 62443 SR 7.6: This CVE maps to SR 7.6 as it involves a vulnerability that can be exploited by an authenticated user to cause a denial of service, affecting the availability of the system and potentially leading to data loss.
Vulnerability Details
CVE IDCVE-2025-44019
BSIDBS-2025-GLOBAL-038848-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Published2026-06-18
Last Modified2026-06-18
ICS Relevance65%
Weakness (CWE)
Verticals
ICS-OT
SourceNVD
Official Description

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system. The following versions of Rockwell Automation FactoryTalk Historian Site Edition are affected: FactoryTalk Historian SE 11 (CVE-2025-13036) FactoryTalk Historian SE <=11.00 (CVE-2025-44019) FactoryTalk Historian SE <=11.00 (CVE-2025-36539) CVSS Vendor Equipment Vulnerabilities v3 7.7 Rockwell Automation Rockwell Autom

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An authenticated user can trigger an uncaught exception in AVEVA PI Data Archive products, leading to the shutdown of critical subsystems and a denial of service. This can result in data loss from snapshots and write cache, depending on the timing of the crash.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductFixed Version
Aveva &mdash;
Rockwell Automation &mdash;
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Threat Intelligence
● Threat Intelligence Validated: July 2026 | Threat Age: 37 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
● Virtual Patch — CITED Relevance SAGE Engine MEDIUM CONFIDENCE

Implement strict access controls and monitor for unusual authentication activities. Ensure regular backups of data to prevent data loss.

No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. SAGE only publishes a network rule when a concrete on-the-wire signature can be grounded in the advisory.

NERC CIP: CIP-007 CIP-007-R2
This CVE violates CIP-007-R2 as it allows an authenticated user to cause a denial of service, which can impact the availability of critical systems and data.
IEC 62443: SR 7.6
This CVE maps to SR 7.6 as it involves a vulnerability that can be exploited by an authenticated user to cause a denial of service, affecting the availability of the system and potentially leading to data loss.

Virtual patch generated by CITED Relevance SAGE. Validate in isolated environment before production deployment. Compensating control only - does not replace vendor patch.

SAGE Enrichment Record — provenance & audit hash
ModelQwen/Qwen2.5-72B-Instruct-AWQ
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash3eb9975e20af83809e906533f67d9eb5232f2fffa5383beed17f2ba0fdcb11b524f9a6c9991dad9c05db999df377aa4e41e0c90d92afe992093033963e285999
Related CVEs affecting Aveva
CVE-2011-3143 10.0 Use-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, a... CVE-2025-61937 10.0 The vulnerability, if exploited, could allow an unauthenticated miscreant to... CVE-2022-1467 9.9 Windows OS can be configured to overlay a “language bar” on top of any applic... CVE-2017-5158 9.8 An Information Exposure issue was discovered in Schneider Electric Wonderware... CVE-2018-10620 9.8 AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017...
View all Aveva CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.

Join free →