The vulnerability, if exploited, could allow an authenticated miscreant
(Process Optimization Standard User) to tamper with queries in Captive
Historian and a…

CVE-2025-61943 is a high-severity SQL injection vulnerability in AVEVA's Captive Historian component. The vulnerability allows authenticated users with Process Optimization Standard User privileges to tamper with SQL queries and achieve code execution under SQL Server administrative privileges. Exploitation could lead to complete compromise of the SQL Server instance. The vulnerability affects industrial control systems and operational technology environments. Multiple advisory sources including CISA ICS advisories and AVEVA security updates provide remediation guidance.