{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/pipeline-integrity-monitor--2025_sp1_p1_build_7.1.9580.8513/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:aveva:pipeline_integrity_monitor:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.4,"id":"CVE-2026-81821"},{"cvss":8.4,"id":"CVE-2026-81822"},{"cvss":5.3,"id":"CVE-2026-81823"},{"cvss":4.7,"id":"CVE-2026-81824"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Pipeline Integrity Monitor (\u003c= 2025_SP1_P1_build_7.1.9580.8513)"],"_cs_severities":["high"],"_cs_tags":["industrial-control-systems","vulnerability","critical-infrastructure"],"_cs_type":"advisory","_cs_vendors":["AVEVA"],"content_html":"\u003cp\u003eAVEVA Pipeline Integrity Monitor (PIM) is affected by four vulnerabilities (CVE-2026-81821, CVE-2026-81822, CVE-2026-81823, CVE-2026-81824) impacting PIMBoards project files and user sessions. The vulnerabilities, discovered in versions up to 2025_SP1_P1_build_7.1.9580.8513, allow attackers with read access to project files to decrypt sensitive information or perform brute-force attacks against weak password hashes, potentially leading to administrative privilege escalation. Furthermore, missing authorization allows unauthorized unauthenticated read access to PIMBoards data. Finally, an XSS vulnerability enables arbitrary JavaScript execution within an authenticated user's browser session via social engineering. Given the use in critical infrastructure sectors, these vulnerabilities present a significant risk for data exfiltration and credential compromise.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthorized disclosure of sensitive industrial information, compromise of user credentials leading to administrative access within PIMBoards, and potential session hijacking or further malicious activity through arbitrary code execution in browser environments. These risks affect global deployments in the Critical Manufacturing sector.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eApply the AVEVA Pipeline Integrity Monitor 2025 SP1 P2 Security Update immediately and perform the required one-way migration of PIMBoards project files.\u003c/li\u003e\n\u003cli\u003eFor project files that cannot be migrated (e.g., backups or transient copies), implement strict file-system read access controls to mitigate the risk of unauthorized decryption.\u003c/li\u003e\n\u003cli\u003eEnforce a mandatory password change for all PIMBoards users following the upgrade to 2025 SP1 P2, as the migration changes underlying password hashing algorithms.\u003c/li\u003e\n\u003cli\u003eReview security bulletin AVEVA-2026-006 for full remediation details and architectural guidance.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-09-10T16:07:40Z","date_published":"2026-09-10T16:07:40Z","id":"https://feed.craftedsignal.io/briefs/2026-09-aveva-pim-vulnerabilities/","summary":"AVEVA Pipeline Integrity Monitor versions through 2025_SP1_P1_build_7.1.9580.8513 contain multiple vulnerabilities including hard-coded keys and improper authorization, facilitating information disclosure, credential brute-forcing, and XSS-based code execution.","title":"Multiple Vulnerabilities in AVEVA Pipeline Integrity Monitor","url":"https://feed.craftedsignal.io/briefs/2026-09-aveva-pim-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Pipeline Integrity Monitor (\u003c= 2025_SP1_P1_build_7.1.9580.8513)","version":"https://jsonfeed.org/version/1.1"}