{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-9999", "assignerOrgId": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "state": "PUBLISHED", "assignerShortName": "arcinfo", "dateReserved": "2025-09-04T16:34:24.743Z", "datePublished": "2025-09-05T16:41:01.957Z", "dateUpdated": "2025-10-31T16:47:55.704Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "modules": ["Networking"], "product": "PcVue", "vendor": "arcinfo", "versions": [{"lessThanOrEqual": "16.3.3", "status": "affected", "version": "16.0.0", "versionType": "cpe"}, {"lessThanOrEqual": "15.2.13", "status": "affected", "version": "15.0.0", "versionType": "cpe"}, {"lessThanOrEqual": "12.0.32", "status": "affected", "version": "12.0.0", "versionType": "cpe"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:arcinfo:pcvue:*:*:*:*:*:*:*:*", "versionEndIncluding": "16.3.3", "versionStartIncluding": "16.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:arcinfo:pcvue:*:*:*:*:*:*:*:*", "versionEndIncluding": "15.2.13", "versionStartIncluding": "15.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:arcinfo:pcvue:*:*:*:*:*:*:*:*", "versionEndIncluding": "12.0.32", "versionStartIncluding": "12.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}], "credits": [{"lang": "en", "type": "finder", "value": "Guillaume Andr\u00e9 (Synacktiv)"}, {"lang": "en", "type": "finder", "value": "Pierre Gertner (Synacktiv)"}], "datePublic": "2025-09-04T22:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application."}], "value": "Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application."}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "No POC available."}], "value": "No POC available."}, {"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Not known to be exploited"}], "value": "Not known to be exploited"}], "metrics": [{"cvssV4_0": {"Automatable": "YES", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "ADJACENT", "baseScore": 7.6, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "GREEN", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/AU:Y/R:U/RE:M/U:Green", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "MODERATE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"other": {"content": {"Automatable": "Yes", "Exploitation": "None", "Technical Impact": "Partial", "version": "2.0.3"}, "type": "SSVCv2.0"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-940", "description": "CWE-940 Improper Verification of Source of a Communication Channel", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-1288", "description": "CWE-1288 Improper Validation of Consistency within Input", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "shortName": "arcinfo", "dateUpdated": "2025-10-31T16:47:55.704Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.pcvue.com/security/#SB2025-4"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<b>Harden the configuration</b><br><u>Who should apply this recommendation:</u> All users<br>The system operators are highly recommended to take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:<br><ul><li>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the Internet unless required.</li><li>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</li><li>When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as its connected devices.</li></ul><br><b>Update PcVue</b><br><u></u>The previously announced releases, PcVue 12.0.31, 15.2.12 and 16.3.1, are affected by a regression in the client-server networking causing connection instability. If the security fix is enabled, networking packets can be falsely detected as malformed, causing a server station to force a disconnection. This issue leads to a situation where a client station may not be able to stay connected to a server station in a stable way.<br><br>We recommend users having installed PcVue 12.0.31, 15.2.12 or 16.3.1 to either roll back to an earlier stable release, or to disable this mechanism by:<br><ul><li>Check the security alteration setting named 'Networking.Allow security altering configuration options',</li><li>Set the property 'Allow stations with altered security' on Nodes to Yes.</li></ul><br>\n\n<b><u>Available patches:</u></b><br>Planned in:<br><ul><li>16.3.3</li><li>15.2.13</li><li>12.0.32</li></ul>"}], "value": "Harden the configuration\nWho should apply this recommendation: All users\nThe system operators are highly recommended to take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n * Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the Internet unless required.\n * Locate control system networks and remote devices behind firewalls and isolate them from business networks.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as its connected devices.\n\n\n\nUpdate PcVue\nThe previously announced releases, PcVue 12.0.31, 15.2.12 and 16.3.1, are affected by a regression in the client-server networking causing connection instability. If the security fix is enabled, networking packets can be falsely detected as malformed, causing a server station to force a disconnection. This issue leads to a situation where a client station may not be able to stay connected to a server station in a stable way.\n\nWe recommend users having installed PcVue 12.0.31, 15.2.12 or 16.3.1 to either roll back to an earlier stable release, or to disable this mechanism by:\n * Check the security alteration setting named 'Networking.Allow security altering configuration options',\n * Set the property 'Allow stations with altered security' on Nodes to Yes.\n\n\n\n\n\nAvailable patches:\nPlanned in:\n * 16.3.3\n * 15.2.13\n * 12.0.32"}], "source": {"advisory": "SB2025-4", "discovery": "EXTERNAL"}, "title": "Improper validation of payload elements", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-05T17:48:53.486647Z", "id": "CVE-2025-9999", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-05T17:49:13.857Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-9999", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-05T17:48:53.486647Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-05T17:49:06.491Z"}}], "cna": {"title": "Improper validation of payload elements", "source": {"advisory": "SB2025-4", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Guillaume Andr\u00e9 (Synacktiv)"}, {"lang": "en", "type": "finder", "value": "Pierre Gertner (Synacktiv)"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 7.6, "Automatable": "YES", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/AU:Y/R:U/RE:M/U:Green", "providerUrgency": "GREEN", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "MODERATE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"other": {"type": "SSVCv2.0", "content": {"version": "2.0.3", "Automatable": "Yes", "Exploitation": "None", "Technical Impact": "Partial"}}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "arcinfo", "modules": ["Networking"], "product": "PcVue", "versions": [{"status": "affected", "version": "16.0.0", "versionType": "cpe", "lessThanOrEqual": "16.3.3"}, {"status": "affected", "version": "15.0.0", "versionType": "cpe", "lessThanOrEqual": "15.2.13"}, {"status": "affected", "version": "12.0.0", "versionType": "cpe", "lessThanOrEqual": "12.0.32"}], "defaultStatus": "affected"}], "exploits": [{"lang": "en", "value": "No POC available.", "supportingMedia": [{"type": "text/html", "value": "No POC available.", "base64": false}]}, {"lang": "en", "value": "Not known to be exploited", "supportingMedia": [{"type": "text/html", "value": "Not known to be exploited", "base64": false}]}], "solutions": [{"lang": "en", "value": "Harden the configuration\nWho should apply this recommendation: All users\nThe system operators are highly recommended to take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:\n * Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the Internet unless required.\n * Locate control system networks and remote devices behind firewalls and isolate them from business networks.\n * When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as its connected devices.\n\n\n\nUpdate PcVue\nThe previously announced releases, PcVue 12.0.31, 15.2.12 and 16.3.1, are affected by a regression in the client-server networking causing connection instability. If the security fix is enabled, networking packets can be falsely detected as malformed, causing a server station to force a disconnection. This issue leads to a situation where a client station may not be able to stay connected to a server station in a stable way.\n\nWe recommend users having installed PcVue 12.0.31, 15.2.12 or 16.3.1 to either roll back to an earlier stable release, or to disable this mechanism by:\n * Check the security alteration setting named 'Networking.Allow security altering configuration options',\n * Set the property 'Allow stations with altered security' on Nodes to Yes.\n\n\n\n\n\nAvailable patches:\nPlanned in:\n * 16.3.3\n * 15.2.13\n * 12.0.32", "supportingMedia": [{"type": "text/html", "value": "<b>Harden the configuration</b><br><u>Who should apply this recommendation:</u> All users<br>The system operators are highly recommended to take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:<br><ul><li>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the Internet unless required.</li><li>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</li><li>When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as its connected devices.</li></ul><br><b>Update PcVue</b><br><u></u>The previously announced releases, PcVue 12.0.31, 15.2.12 and 16.3.1, are affected by a regression in the client-server networking causing connection instability. If the security fix is enabled, networking packets can be falsely detected as malformed, causing a server station to force a disconnection. This issue leads to a situation where a client station may not be able to stay connected to a server station in a stable way.<br><br>We recommend users having installed PcVue 12.0.31, 15.2.12 or 16.3.1 to either roll back to an earlier stable release, or to disable this mechanism by:<br><ul><li>Check the security alteration setting named 'Networking.Allow security altering configuration options',</li><li>Set the property 'Allow stations with altered security' on Nodes to Yes.</li></ul><br>\n\n<b><u>Available patches:</u></b><br>Planned in:<br><ul><li>16.3.3</li><li>15.2.13</li><li>12.0.32</li></ul>", "base64": false}]}], "datePublic": "2025-09-04T22:00:00.000Z", "references": [{"url": "https://www.pcvue.com/security/#SB2025-4", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application.", "supportingMedia": [{"type": "text/html", "value": "Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-940", "description": "CWE-940 Improper Verification of Source of a Communication Channel"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1288", "description": "CWE-1288 Improper Validation of Consistency within Input"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arcinfo:pcvue:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "16.3.3", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:arcinfo:pcvue:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "15.2.13", "versionStartIncluding": "15.0.0"}, {"criteria": "cpe:2.3:a:arcinfo:pcvue:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "12.0.32", "versionStartIncluding": "12.0.0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "shortName": "arcinfo", "dateUpdated": "2025-10-31T16:47:55.704Z"}}}, "cveMetadata": {"cveId": "CVE-2025-9999", "state": "PUBLISHED", "dateUpdated": "2025-10-31T16:47:55.704Z", "dateReserved": "2025-09-04T16:34:24.743Z", "assignerOrgId": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "datePublished": "2025-09-05T16:41:01.957Z", "assignerShortName": "arcinfo"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unauthorized commands in the application."}], "id": "CVE-2025-9999", "lastModified": "2025-09-05T17:47:10.303", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "YES", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "GREEN", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:Green", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "MODERATE"}, "source": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "type": "Secondary"}]}, "published": "2025-09-05T17:15:40.263", "references": [{"source": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "url": "https://www.pcvue.com/security/#SB2025-4"}], "sourceIdentifier": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-940"}, {"lang": "en", "value": "CWE-1288"}], "source": "87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932", "type": "Secondary"}]}

{}

{"created": "2025-09-07T15:24:58.715359+00:00", "updated": "2025-09-07T15:24:58.715421+00:00", "vendors": ["arcinfo", "arcinfo$PRODUCT$pcvue"]}