Find merged stories by title or summary.
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to tamper with serialized data, potentially resulting in code execution during deserialization. The following versions of AVEVA Enterprise SCADA are affected: Enterprise SCADA 2025 (CVE-2025-7639) Enterprise SCADA =2024 • =2023 • =2022 • =2024 • =2023 • =2022 • "Mode" setting from 'Binary Formatter' to 'Json'. Change "BinarySerializer" - "AcceptBinaryFormattedData" setting from 'true' to 'false'. Re-cache the XOS Event Handlers assembly Mitigation Client Components: Configure clients/products that interface with Enterprise SCADA to only use JSON serialization.
You've reached the end of current stories for this search.