Rockwell Automation Verve Asset Manager
view advisory published 2025-11-13
Successful exploitation of this vulnerability could result in an attacker accessing or altering user data.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-11862US | —OT elevated | — | ||
A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API. | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-317-05 JSONself
- ICSA Advisory ICSA-25-317-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- MitigationVerve Asset Manager
Rockwell Automation has addressed this issue in version 1.41.4 and 1.42. Rockwell Automation encourages users to update to the newest available version.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan