AVEVA Process Optimization Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in AVEVA Process Optimization, affecting all versions prior to 2024.1. This vulnerability allows an unauthenticated attacker to execute code with OS system privileges under the 'taoimr' service, potentially leading to a complete compromise of the model application server.

Impact

Exploitation of this vulnerability could result in unauthorized remote code execution with system privileges on the affected server.

Remediation

Users are advised to update to AVEVA Process Optimization version 2024.1 or later. For detailed update instructions, refer to the AVEVA Security Bulletin AVEVA-2026-001.