CVE-2025-65117 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed OLE objects into graphics, and escalate…
High CVSS: 8.5

CVE-2025-65117

The vulnerability, if exploited, could allow an authenticated miscreant
(Process Optimization Designer User) to embed OLE objects into graphics,
and escalate their privileges to the identity of a victim user who
subsequently interacts with the graphical elements.
Vendor
Aveva
Product
Process Optimization
CWE
CWE-676
Yayın Tarihi
2026-01-16 02:16:45
Güncelleme
2026-01-22 15:14:11
Source Identifier
ics-cert@hq.dhs.gov
KEV Date Added
-

Kategoriler

CWE-676 Process Optimization HIGH Aveva 2026

Referanslar

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea https://www.aveva.com/en/support-and-success/cyber-security-updates/ https://www.cisa.gov/news-events/ics-advisories/icsa-26-015-01