{"cve":{"cve_id":"CVE-2025-14376","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00126,"epss_percentile":0.02602,"epss_as_of":"2026-06-23","description":"A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secrets stored in environment variables on the ADI server. This component has been retired and has been optional since the 1.36 release in 2024.","published_at":"2026-01-20T13:18:32.484000Z","last_modified_at":null,"cvss_v3_score":null,"cvss_v3_vector":null,"cvss_v3_severity":null,"cvss_v4_score":8.6,"cvss_v4_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H","cvss_v4_severity":"HIGH","ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-922"],"nvd_references":["https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1767.html"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-28T23:25:25.478282Z"},"effective_severity":"HIGH","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":null,"metrics":[]},"cvss_v4_decoded":{"version":"4.0","metrics":[{"metric":"AV","name":"Attack Vector","value":"L","value_label":"Local"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"AT","name":"Attack Requirements","value":"P","value_label":"Present"},{"metric":"PR","name":"Privileges Required","value":"H","value_label":"High"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"VC","name":"Confidentiality (Vulnerable System)","value":"H","value_label":"High"},{"metric":"VI","name":"Integrity (Vulnerable System)","value":"H","value_label":"High"},{"metric":"VA","name":"Availability (Vulnerable System)","value":"N","value_label":"None"},{"metric":"SC","name":"Confidentiality (Subsequent System)","value":"H","value_label":"High"},{"metric":"SI","name":"Integrity (Subsequent System)","value":"H","value_label":"High"},{"metric":"SA","name":"Availability (Subsequent System)","value":"H","value_label":"High"}]},"affected":[{"vendor_slug":"rockwell-automation","vendor_name":"Rockwell Automation","product_slug":"verve-asset-manager","product_name":"Verve Asset Manager","version_start":"1.33   1.34   1.35   1.36   1.37   1.38   1.39   1.40   1.41  1.41.1   1.41.2   1.41.3","version_start_inclusive":true,"version_end":"1.33   1.34   1.35   1.36   1.37   1.38   1.39   1.40   1.41  1.41.1   1.41.2   1.41.3","version_end_inclusive":true,"cpe23_uri":"cve5:rockwell-automation:verve-asset-manager:1.33   1.34   1.35   1.36   1.37   1.38   1.39   1.40   1.41  1.41.1   1.41.2   1.41.3:1.33   1.34   1.35   1.36   1.37   1.38   1.39   1.40   1.41  1.41.1   1.41.2   1.41.3"}],"exploit_refs":[],"news":[],"references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1767.html","source_type":"VENDOR_ADVISORY","tags":["advisory"]}],"timeline":[{"type":"published","at":"2026-01-20T13:18:32.484000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:41:34.426622Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:41:34.426622Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:41:34.426622Z","label":"CVSS score revised","source":"cvelistv5"}]}