AVEVA Enterprise SCADA

Summary

Vulnerabilities 1

• High 7.1
  CVE-2025-7639

  AVEVA Enterprise SCADA Deserialization of Untrusted Data

  The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security g…

  AVEVA AVEVA Enterprise SCADA HMI AVEVA Pipeline Integrity Monitor (delivered on Pipeline Simulation media) Measurement Advisor
  Aug 14, 2026

Revision history

1. 2026-08-13 #1

   Initial Republication of AVEVA security bulletin AVEVA-2026-005

References

• ICSA Advisory ICSA-26-225-01 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
• Recommended Practices
  https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b
• Recommended Practices
  https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
• Recommended Practices
  https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks