CVE-2025-7639 — AVEVA Enterprise SCADA Deserialization of Untrusted Data
The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code…
Published: 2026-08-14 · CVSS: 6.1 · CVSS 4.0
The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps".
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7