Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-14376

Verve Asset Manager – Plaintext Storage Vulnerabilities

Description

A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation Verve Asset Manager

Default version status: unaffected

  • 1.33 1.34 1.35 1.36 1.37 1.38 1.39 1.40 1.41 1.41.1 1.41.2 1.41.3affected

References