CVE-2025-61937

概要

参考情報

• cisagov/CSAF · Third Party Advisory
• softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea · Permissions Required
• aveva.com/en/support-and-success/cyber-security-updates · Vendor Advisory
• cisa.gov/news-events/ics-advisories/icsa-26-015-01 · Third Party Advisory

process optimization のその他の脆弱性

• CVE-2025-65118高 8.8The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimization services into load…
• CVE-2025-65117高 7.7The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed OLE objects into grap…
• CVE-2025-64769高 7.1The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted and could become subj…
• CVE-2025-64729高 8.2The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to tamper with Process Optimization project file…
• CVE-2025-64691高 8.8The vulnerability, if exploited, could allow an authenticated miscreant (OS standard user) to tamper with TCL Macro scripts and escalate p…