{"id":"CVE-2025-64691","aliases":["EUVD-2026-2994","GHSA-c2v5-hpfr-gw62"],"status":"published","title":"AVEVA Process Optimization Code Injection","description":"The vulnerability, if exploited, could allow an authenticated miscreant \n(OS standard user) to tamper with TCL Macro scripts and escalate \nprivileges to OS system, potentially resulting in complete compromise of\n the model application server.","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00288,"percentile":0.21582,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2026-01-16T00:06:56Z","modified":"2026-06-17T09:55:02Z","products":[{"vendor":"aveva","product":"process optimization"},{"vendor":"aveva","product":"process_optimization"}],"references":[{"url":"https://www.aveva.com/en/support-and-success/cyber-security-updates/","tags":["Vendor Advisory"]},{"url":"https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea","tags":["Permissions Required"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-015-01","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64691"},{"url":"https://www.aveva.com/en/support-and-success/cyber-security-updates"},{"url":"https://github.com/advisories/GHSA-c2v5-hpfr-gw62"}],"sources":{"cve":[{"id":"CVE-2025-64691","title":"AVEVA Process Optimization Code Injection","description":"The vulnerability, if exploited, could allow an authenticated miscreant \n(OS standard user) to tamper with TCL Macro scripts and escalate \nprivileges to OS system, potentially resulting in complete compromise of\n the model application server.","status":"published","published":"2026-01-16T00:06:56.554Z","modified":"2026-01-16T15:12:10.618Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical","assessor":"cna"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:46.750177Z"}],"euvd":[{"id":"EUVD-2026-2994","description":"The vulnerability, if exploited, could allow an authenticated miscreant \n(OS standard user) to tamper with TCL Macro scripts and escalate \nprivileges to OS system, potentially resulting in complete compromise of\n the model application server.","status":"published","published":"2026-01-16T00:06:56Z","modified":"2026-01-16T15:12:10Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical"}],"updated_at":"2026-11-02T19:48:50.882066Z"}],"ghsa":[{"id":"GHSA-c2v5-hpfr-gw62","title":"The vulnerability, if exploited, could allow an authenticated miscreant \n(OS standard user) to...","description":"The vulnerability, if exploited, could allow an authenticated miscreant \n(OS standard user) to tamper with TCL Macro scripts and escalate \nprivileges to OS system, potentially resulting in complete compromise of\n the model application server.","status":"published","published":"2026-01-16T03:30:21Z","modified":"2026-01-16T03:30:27Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:05:38.149378Z"}],"nvd":[{"id":"CVE-2025-64691","description":"The vulnerability, if exploited, could allow an authenticated miscreant \n(OS standard user) to tamper with TCL Macro scripts and escalate \nprivileges to OS system, potentially resulting in complete compromise of\n the model application server.","status":"published","published":"2026-01-16T02:16:45.293Z","modified":"2026-06-17T09:55:02.933Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:11:57.915063Z"}]}}