CVE-2025-41415: AVEVA PI Integrator · CWE-201
Affects AVEVA PI IntegratorSource CVE Database V5
Not known to be exploited · CVSS 6.5 Medium.
Data as of 26 Oct 2026, 10:12 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 30% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 21 Aug 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| AVEVA PI Integrator | Affected
| Fixed in– |
AI-suggested
- Restrict and monitor access: Limit the number of users with privileges to access publication targets in PI Integrator. Implement strict role-based access controls (RBAC) and regularly audit user permissions to ensure only necessary personnel have access.
- Network segmentation: Isolate the PI Integrator environment from less trusted networks and restrict access to it through firewalls and network access controls.
- Monitor logs and alerts: Enable detailed logging of access to publication targets and monitor for unusual or unauthorized access patterns that could indicate exploitation attempts.
- Use strong authentication: Enforce multi-factor authentication (MFA) for all users with access to the PI Integrator to reduce the risk of credential compromise.
- Data encryption: Where possible, ensure sensitive data handled by PI Integrator is encrypted both at rest and in transit to reduce the impact of any data leakage.
- Vendor engagement: Maintain close communication with AVEVA for updates on patches or mitigations and apply them promptly once available.
- Incident response readiness: Prepare and test incident response plans specifically for industrial environments to quickly detect and respond to any exploitation attempts.
- Conduct security assessments: Perform regular vulnerability assessments and penetration testing focused on the PI Integrator and connected systems to identify and remediate weaknesses proactively.
Description
The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to access publication targets) to retrieve sensitive information that could then be used to gain additional access to downstream resources.