{"id":"CVE-2025-61937","aliases":["EUVD-2026-2993","GHSA-cgc9-hp86-4fr7"],"status":"published","title":"AVEVA Process Optimization Code Injection","description":"The vulnerability, if exploited, could allow an unauthenticated \nmiscreant to achieve remote code execution under OS system privileges of\n “taoimr” service, potentially resulting in complete compromise of the  model application server.","severity":{"version":"4.0","score":10,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0148,"percentile":0.74289,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2026-01-16T00:04:37Z","modified":"2026-06-17T09:51:06Z","products":[{"vendor":"aveva","product":"process optimization"},{"vendor":"aveva","product":"process_optimization"}],"references":[{"url":"https://www.aveva.com/en/support-and-success/cyber-security-updates/","tags":["Vendor Advisory"]},{"url":"https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea","tags":["Permissions Required"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-015-01","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61937"},{"url":"https://www.aveva.com/en/support-and-success/cyber-security-updates"},{"url":"https://github.com/advisories/GHSA-cgc9-hp86-4fr7"}],"sources":{"cve":[{"id":"CVE-2025-61937","title":"AVEVA Process Optimization Code Injection","description":"The vulnerability, if exploited, could allow an unauthenticated \nmiscreant to achieve remote code execution under OS system privileges of\n “taoimr” service, potentially resulting in complete compromise of the  model application server.","status":"published","published":"2026-01-16T00:04:37.128Z","modified":"2026-01-16T15:10:11.404Z","cvss":[{"version":"4.0","score":10,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical","assessor":"cna"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:45.105469Z"}],"euvd":[{"id":"EUVD-2026-2993","description":"The vulnerability, if exploited, could allow an unauthenticated \nmiscreant to achieve remote code execution under OS system privileges of\n “taoimr” service, potentially resulting in complete compromise of the  model application server.","status":"published","published":"2026-01-16T00:04:37Z","modified":"2026-01-16T15:10:11Z","cvss":[{"version":"4.0","score":10,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical"}],"updated_at":"2026-11-02T19:48:50.882066Z"}],"ghsa":[{"id":"GHSA-cgc9-hp86-4fr7","title":"The vulnerability, if exploited, could allow an unauthenticated \nmiscreant to achieve remote code...","description":"The vulnerability, if exploited, could allow an unauthenticated \nmiscreant to achieve remote code execution under OS system privileges of\n “taoimr” service, potentially resulting in complete compromise of the  model application server.","status":"published","published":"2026-01-16T03:30:21Z","modified":"2026-01-16T03:30:27Z","cvss":[{"version":"4.0","score":10,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:05:38.149378Z"}],"nvd":[{"id":"CVE-2025-61937","description":"The vulnerability, if exploited, could allow an unauthenticated \nmiscreant to achieve remote code execution under OS system privileges of\n “taoimr” service, potentially resulting in complete compromise of the  model application server.","status":"published","published":"2026-01-16T02:16:42.833Z","modified":"2026-06-17T09:51:06.507Z","cvss":[{"version":"4.0","score":10,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:11:57.915063Z"}]}}