Skip to content
OpenAdvisories
Critical 3 exploited CVEs ICSA-25-077-02 3 CVEs

Rockwell Automation Lifecycle Services with VMware

Published Mar 18, 2025 · Updated Mar 18, 2025

Vendor: Rockwell Automation Product: Endpoint Protection Service with RA Proxy & VMware only Product: Engineered and Integrated Solutions with VMware Product: Industrial Data Center (IDC) with VMware Product: Threat Detection Managed Services (TDMS) with VMware Product: VersaVirtual Appliance (VVA) with VMware

Summary

Successful exploitation of these vulnerabilities could allow an attacker with local administrative privileges to execute code.

Vulnerabilities 3

  • Critical 9.3
    CVE-2025-22224 Exploited

    VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds …

    VMware Workstation ESXi Telco Cloud Platform Virtualization
    KEV Mar 4, 2025
  • High 8.2
    CVE-2025-22225 Exploited · Ransomware

    VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may tri…

    Virtualization
    KEV Mar 4, 2025
  • High 7.1
    CVE-2025-22226 Exploited

    VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HG…

    Virtualization
    KEV Mar 4, 2025

Revision history

  1. #1

    Initial Publication

References