This vulnerability (CWE-327) arises from the use of weak cryptographic hashing algorithms to protect app-native passwords in AVEVA Pipeline Integrity Monitor's PIMBoards project files. An attacker with read access to these files can perform computational brute-force attacks against the weak hashes to recover user passwords. Successful exploitation could lead to privilege escalation to an administrator user within PIMBoards. The CVSS 4.0 score is 8.3 (high), reflecting the local attack vector with low complexity and no user interaction required, but requiring some privileges to read project files. No vendor advisory or patch information is currently available.

If exploited, this vulnerability allows an attacker with read access to project files to recover user passwords by brute forcing weak hashes, potentially leading to administrator-level access within the PIMBoards application. This compromises confidentiality and integrity of user credentials and system access controls.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict read access to PIMBoards project files to trusted users only to reduce exposure.