CVE-2025-44019
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system. The following ve...
Affects 0 products across 2 vendors.
CVE-2025-44019 affects AVEVA PI Data Archive products, allowing an authenticated user to cause a denial of service by exploiting an uncaught exception. This can lead to the shutdown of necessary subsystems and potential data loss from snapshots/write cache. The CVSS score is 7.1, indicating a high impact on availability and a low impact on integrity. No public PoC or known exploits exist, and the EPSS score is very low, suggesting minimal likelihood of exploitation in the wild.
BSID: BS-2025-GLOBAL-038848-H • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-44019?
What is the CVSS score for CVE-2025-44019?
Is CVE-2025-44019 actively exploited?
How do I remediate CVE-2025-44019?
What systems are affected by CVE-2025-44019?
What NERC-CIP standard applies to CVE-2025-44019?
What IEC 62443 requirement maps to CVE-2025-44019?
| CVE ID | CVE-2025-44019 |
|---|---|
| BSID | BS-2025-GLOBAL-038848-H BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H |
| Published | 2026-06-18 |
| Last Modified | 2026-06-18 |
| ICS Relevance | 65% |
| Weakness (CWE) | |
| Verticals | |
| Source | NVD |
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system. The following versions of Rockwell Automation FactoryTalk Historian Site Edition are affected: FactoryTalk Historian SE 11 (CVE-2025-13036) FactoryTalk Historian SE <=11.00 (CVE-2025-44019) FactoryTalk Historian SE <=11.00 (CVE-2025-36539) CVSS Vendor Equipment Vulnerabilities v3 7.7 Rockwell Automation Rockwell Autom
Source: NIST NVD / MITRE CVE Database
An authenticated user can trigger an uncaught exception in AVEVA PI Data Archive products, leading to the shutdown of critical subsystems and a denial of service. This can result in data loss from snapshots and write cache, depending on the timing of the crash.
Exploitation Likelihood: MINIMAL
| Vendor | Product | Fixed Version |
|---|---|---|
| Aveva | — | — |
| Rockwell Automation | — | — |
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Implement strict access controls and monitor for unusual authentication activities. Ensure regular backups of data to prevent data loss.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. SAGE only publishes a network rule when a concrete on-the-wire signature can be grounded in the advisory.
This CVE violates CIP-007-R2 as it allows an authenticated user to cause a denial of service, which can impact the availability of critical systems and data.
This CVE maps to SR 7.6 as it involves a vulnerability that can be exploited by an authenticated user to cause a denial of service, affecting the availability of the system and potentially leading to data loss.
Virtual patch generated by CITED Relevance SAGE. Validate in isolated environment before production deployment. Compensating control only - does not replace vendor patch.
SAGE Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 3eb9975e20af83809e906533f67d9eb5232f2fffa5383beed17f2ba0fdcb11b524f9a6c9991dad9c05db999df377aa4e41e0c90d92afe992093033963e285999 |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.
Join free →