AVEVA PI Data Archive

Risk Summary

Successful exploitation of these vulnerabilities could shut down necessary subsystems and cause a denial-of-service condition.

CVEs (2)

Remediations

• AVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Customers using affected product versions should apply security updates to mitigate the risk of exploit.
• (CVE-2025-44019, CVE-2025-36539) All affected versions of PI Data Archive and PI Server can be fixed by upgrading to PI Server 2024 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select version 2024 or higher.
• (CVE-2025-44019) PI Data Archive 2018 SP3 Patch 4 and all prior and PI Server 2018 SP3 Patch 6 and all prior can alternatively be fixed by upgrading to PI Server 2018 SP3 Patch 7 or higher. From OSISoft Customer Portal, search for "AVEVA PI Server" and select Version 2018 SP3 Patch 7 or higher.
• AVEVA further recommends users follow general defensive measures:
• Monitor liveness of PI Network Manager and PI Archive Subsystem services.
• Set the PI Network Manager and PI Archive Subsystem services to automatically restart.
• Limit Port 5450 access to trusted workstations and software.
• For a list of PI System firewall port requirements, see knowledge base article KB01162 - Firewall Port Requirements.
• Impact and severity of vulnerabilities can be reduced through industry accepted IT practices. Please consult your IT engineer for advice on how to best implement these firewall restrictions in your organization's architecture. OSIsoft technical support provides guidance on architectural approaches, backup procedures, network defenses, and operating system configuration.
• For a starting point on PI System security best practices, see knowledge base article KB00833 - Seven best practices for securing your PI Server.
• For additional information please refer to AVEVA-2025-001.

Affected Vendors

Affected Products (6)

Affected Sectors

Critical Manufacturing