CVE-2025-61937-nvd.nist.gov-Undergoing Analysis

The vulnerability, if exploited, could allow an unauthenticated
miscreant to achieve remote code execution under OS system privileges of
“taoimr” service, pot…

Published:

15 January 2026 at 23:00:00

Alert date:

16 January 2026 at 17:05:16

Source:

nvd.nist.gov

Critical Infrastructure, Enterprise Applications

CVE-2025-61937 is a critical vulnerability affecting the taoimr service in AVEVA products. The vulnerability allows unauthenticated remote attackers to achieve remote code execution with OS system privileges. Successful exploitation could result in complete compromise of the model application server. The vulnerability has been assigned a high criticality rating and is being analyzed by CISA and AVEVA for industrial control systems impact.

Technical details

Mitigation steps:

Affected products:

AVEVA taoimr service