Opto 22 GRV-EPIC and groov RIO
Successful exploitation of this vulnerability could result in the execution of arbitrary shell commands with root privileges.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-13087US | — | — | ||
A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges. When a POST request is execute… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-324-03 JSONself
- ICSA Advisory ICSA-25-324-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- MitigationGRV-EPIC-PR1 Firmware
Opto 22 has published a patch to address this vulnerability and recommends that users upgrade to GRV-EPIC and groov RIO Firmware Version 4.0.3. Additional information is available from Opto 22 here.
https://www.opto22.com/support/resources-tools/knowledgebase/kb91326 - MitigationGRV-EPIC-PR2 Firmware
Opto 22 has published a patch to address this vulnerability and recommends that users upgrade to GRV-EPIC and groov RIO Firmware Version 4.0.3. Additional information is available from Opto 22 here.
https://www.opto22.com/support/resources-tools/knowledgebase/kb91326 - Mitigationgroov RIO GRV-R7-I1VAPM-3 Firmware
Opto 22 has published a patch to address this vulnerability and recommends that users upgrade to GRV-EPIC and groov RIO Firmware Version 4.0.3. Additional information is available from Opto 22 here.
https://www.opto22.com/support/resources-tools/knowledgebase/kb91326 - Mitigationgroov RIO GRV-R7-MM1001-10 Firmware
Opto 22 has published a patch to address this vulnerability and recommends that users upgrade to GRV-EPIC and groov RIO Firmware Version 4.0.3. Additional information is available from Opto 22 here.
https://www.opto22.com/support/resources-tools/knowledgebase/kb91326 - Mitigationgroov RIO GRV-R7-MM2001-10 Firmware
Opto 22 has published a patch to address this vulnerability and recommends that users upgrade to GRV-EPIC and groov RIO Firmware Version 4.0.3. Additional information is available from Opto 22 here.
https://www.opto22.com/support/resources-tools/knowledgebase/kb91326
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan