View CSAF

Summary

Successful exploitation of this vulnerability could allow an unauthenticated attacker to modify simulation parameters, training configuration and training records.

The following versions of AVEVA Pipeline Simulation are affected:

Pipeline Simulation <=2025_SP1_build_7.1.9497.6351

CVSS Vendor Equipment Vulnerabilities

v3 9.1 AVEVA AVEVA Pipeline Simulation Missing Authorization

Background

Critical Infrastructure Sectors: Critical Manufacturing

Countries/Areas Deployed: Worldwide

Company Headquarters Location: United Kingdom

Vulnerabilities

Expand All +

CVE-2026-5387

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administrator) roles, resulting in privilege escalation with potential for modification of simulation parameters, training configuration, and training records.

View CVE Details

Affected Products

AVEVA Pipeline Simulation

Vendor:

AVEVA

Product…