Volerion logoVolerion
Volerion logoVolerion

AVEVA PI Data Archive Uncaught Exception Vulnerability Leading to Denial-of-Service

Vulnerability

A denial-of-service vulnerability has been identified in AVEVA PI Data Archive versions through 2018_SP3_Patch_7, 2023, 2023_Patch_1, and 2024. The issue arises from an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services, disrupting service availability.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by crashing core PI services, leading to a disruption in service availability.

Added: Feb 10, 2026, 9:45 PM
Updated: Feb 11, 2026, 12:56 AM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
2.5
exploitability
7.0
remediation
8.3
relevance
2.8
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.