AVEVA PI Connector for CygNet Improper Validation of Integrity Check Value Vulnerability Allowing Denial-of-Service

A vulnerability exists in AVEVA PI Connector for CygNet, affecting versions through 1.6.14, due to improper validation of integrity check values. This vulnerability could allow an individual with elevated privileges to alter local data files, such as cache and buffers, in a manner that causes the connector service to become unresponsive.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing the connector service to become unresponsive.

Remediation

Users can upgrade to PI Connector for CygNet version 1.7.0 or higher to address this vulnerability. For additional information, refer to the AVEVA Security Bulletin AVEVA-2025-002.