Medium severity · published Jun 12, 2025
CVE-2025-36539
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive …
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
AVEVA PI Data Archive products
are vulnerable to an uncaught exception that, if exploited, could allow
an authenticated user to shut down certain necessary PI Data Archive
subsystems, resulting in a denial of service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
In the news
VulnerabilityHigh
Rockwell Automation FactoryTalk Historian Site Edition
View CSAF
Summary
Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system.
The following versions of Rockwell Automation FactoryTalk Historian Site Edition are affected:
FactoryTalk Historian SE 11 (CVE-2025-13036)
FactoryTalk Historian SE <=11.00 (CVE-2025-44019)
FactoryTalk Historian SE <=11.00 (CVE-2025-36539)
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.7
Rockwell Automation
Rockwell Automation FactoryTalk Historian Site Edition
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), Uncaught Exception
Background
Critical Infrastructure Sectors: Critical Manufacturing
Countries/Areas Deployed: Worldwide
Company Headquarters Location: United States
Vulnerabilities
Expand All +
CVE-2025-13036
An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid authentication token.
View CVE Details
Affected Products
Rockwell Automation FactoryTalk Historian Site Edition
Vendor: Rockwell Automation
Product Version: Rockwell Automation FactoryTalk Historian SE: 11
Product Status: known_affected
Remediations
Mitigation Rockwell Automation recommends the following: Mitigations and Workarounds for CV...
Jun 18, 2026·CISA Advisories