AVEVA Process Optimization

Risk Summary

Successful exploitation of these vulnerabilities could enable an attacker to execute remote code, perform SQL injection, escalate privileges, or access sensitive information.

CVEs (7)

Remediations

• AVEVA recommends users take the following action:
• Update to AVEVA Process Optimization v2025
• AVEVA alternatively recommends the following actions users can take to mitigate risk:
• Apply Host and/or Network firewall rules restricting the taoimr service to accept traffic only from trusted source(s). By default, AVEVA Process Optimization listens on port 8888/8889(TLS). Please refer to the AVEVA Process Optimization Installation Guide for additional details on ports configuration.
• Apply ACLs to the installation and data folders, limiting write-access to trusted users only.
• Maintain a trusted chain-of-custody on Process Optimization project files during creation, modification, distribution, backups, and use.
• For more information, please Aveva's security bulletin AVEVA-2026-001.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing