What’s Vulnerable › Vulnerabilities

CVE-2025-9317: AVEVA Edge Use of a Broken or Risky Cryptographic Algorithm

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-15 · updated 2026-10-18
• Weakness: CWE-327

Description

The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache files to reverse engineer Edge users' app-native or Active Directory passwords through computational brute-forcing of weak hashes.

Affected products

• AVEVA Edge: through Versions 2023 R2

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-317-03.json
• https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2025-006.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-03

Get alerted when CVE-2025-9317 or the next vulnerability affects your stack