Skip to content
OpenAdvisories
High · 7.1 CVE-2025-54460 EUVD-2025-25488GHSA-2j8g-w8gx-h43r

AVEVA PI Integrator Unrestricted Upload of File with Dangerous Type

Published Aug 21, 2025 · Updated Aug 21, 2025 · Assigned by icscert

Description

The vulnerability, if exploited, could allow an authenticated miscreant
(with privileges to create or access publication targets of type Text
File or HDFS) to upload and persist files that could potentially be
executed.

Affected products

VendorProductAffectedFixed
AVEVA PI Integrator < 2020 R2 SP1 2020 R2 SP1

Advisories 1

References