Description
The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial-of-service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | PI Data Archive PI Server | ≤ 2018_SP3_Patch_7 | — |
Advisories 2
- WID-SEC-2026-0390 AVEVA PI System: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 10, 2026
- ICSA-26-041-03 AVEVA PI Data Archive CISA ICS & IT advisories · Feb 10, 2026
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-03 government-resource