CVE-2025-64769
Severity CVSS v4.0:
HIGH
Type:
CWE-319
Cleartext Transmission of Sensitive Information
Publication date:
16/01/2026
Last modified:
16/01/2026
Description
The Process Optimization application suite leverages connection <br />
channels/protocols that by-default are not encrypted and could become <br />
subject to hijacking or data leakage in certain man-in-the-middle or <br />
passive inspection scenarios.
Impact
Base Score 4.0
7.60
Severity 4.0
HIGH
Base Score 3.x
7.10
Severity 3.x
HIGH
References to Advisories, Solutions, and Tools
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json
- https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea
- https://www.aveva.com/en/support-and-success/cyber-security-updates/
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-015-01



