CVE-2019-6525: Aveva Wonderware System Platform

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and inter-node communications. A user with low privileges could make use of an API to obtain the credentials for this account.

Affected products

• Aveva Wonderware System Platform: before 2017 (fixed in 2017); version 2017 only

Published 2019-04-11. Last modified 2026-06-17.