Rockwell Automation Verve Asset Manager
Successful exploitation of these vulnerabilities may allow an attacker to access sensitive information stored in variables within the ADI server.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-14377US | —OT elevated | — | ||
A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This… | ||||
| CVE-2025-14376US | — | — | ||
A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This c… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-020-03 JSONself
- ICSA Advisory ICSA-26-020-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationVerve Asset Manager
Rockwell Automation reports that the issue was resolved in version 1.42, and the component has been optional since version 1.36. Rockwell Automation recommends updating to the latest available version.
- MitigationVerve Asset Manager
Rockwell Automation reports that the issue was resolved in version 1.42, and the component has been optional since version 1.36. Rockwell Automation recommends updating to the latest available version.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan