7.5
Élevée
CVE-2025-1449 A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing
Description
A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing. A portion of the administrative web interface for Verve's Legacy Agentless Device Inventory (ADI) capability (deprecated since the 1.36 release) allows users to change a variable with inadequate sanitizing. If exploited, it could allow a threat actor with administrative access to run arbitrary commands in the context of the container running the service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Verve Asset Manager 1.39 | premières → 1.39 | Pas de correctif indiqué |
Autres CVE de Verve Asset Manager
Les 4 CVE de Verve Asset Manager →
CVE-2025-14377
A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext…
8.8
Élevée
CVE-2025-14376
A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext…
8.6
Élevée
CVE-2025-11862
A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and…
8.4
Élevée