CVE-2025-1449 Admin Shell Access Vulnerability in Rockwell Automation Verve Asset Manager

A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing. A portion of the administrative web interface for Verve's Legacy Agentless Device Inventory ADI capability deprecated since the 1.36 release allows users to change a variable with...

CVE-2025-1449 Admin Shell Access Vulnerability in Rockwell Automation Verve Asset Manager

A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing. A portion of the administrative web interface for Verve's Legacy Agentless Device Inventory ADI capability deprecated since the 1.36 release allows users to change a variable with...

CVE-2025-1449

CVE-2025-1449 concerns Rockwell Automation Verve Asset Manager. Technical details from PT-2025-12814 show the vulnerability affects Verve Asset Manager versions 1.39 and earlier, caused by insufficient variable sanitizing in the administrative web interface for the Legacy Agentless Device Invento...

CVE-2025-1449

creationtimestamp| type| source ---|---|--- 2025-03-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-02 2025-03-31 16:33:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9701 2025-03-31 16:44:25+00:00| seen|...