aveva

AVEVA’s PI Data Archive has been the subject of coordinated security advisories after the vendor and U.S. authorities confirmed multiple denial-of-service class vulnerabilities that can be triggered by malformed or unexpected input and — in at least one case — by an uncaught exception that can...

A recently disclosed weakness in the AVEVA PI to CONNECT Agent can leak proxy connection details — including proxied URLs and embedded credentials — via Windows event logs, and operators must treat this as an urgent secrets‑exposure incident: inventory affected hosts, purge or redact exposed...

AVEVA’s Edge HMI/SCADA tool has a new, high‑impact vulnerability that shifts the conversation from “can project files be tampered with?” to “can project files leak live credentials?” — and the short answer is yes, unless operators act now to apply the vendor fix and harden access to project...