Description
The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | PI to CONNECT Agent | ≤ Version v2.4.2520 | — |
Advisories 1
- ICSA-26-041-04 AVEVA PI to CONNECT Agent CISA ICS & IT advisories · Feb 10, 2026
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-04 government-resource