Skip to content
OpenAdvisories
Critical ICSA-25-212-02 4 CVEs

Rockwell Automation Lifecycle Services with VMware

Published Jul 31, 2025 · Updated Jul 31, 2025

Vendor: Rockwell Automation Product: Endpoint Protection Service with Rockwell Automation Proxy & VMware only Product: Engineered and Integrated Solutions with VMware Product: Industrial Data Center (IDC) with VMware Product: Threat Detection Managed Services (TDMS) with VMware Product: VersaVirtual Appliance (VVA) with VMware

Summary

Successful exploitation of these vulnerabilities could lead to code execution on the host or leakage of memory from processes communicating with vSockets.

Vulnerabilities 4

  • Critical 9.3
    CVE-2025-41236

    VMXNET3 integer-overflow vulnerability

    VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to e…

    VMware Workstation Fusion ESXi Virtualization
  • Critical 9.3
    CVE-2025-41237

    VMCI integer-underflow vulnerability

    VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine Communication Interface) that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to exe…

    VMware Workstation Fusion ESXi Virtualization
  • Critical 9.3
    CVE-2025-41238

    PVSCSI heap-overflow vulnerability

    VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI) controller that leads to an out of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue…

    VMware Workstation Fusion ESXi Virtualization
  • High 7.1
    CVE-2025-41239

    vSockets information-disclosure vulnerability

    VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit thi…

    VMware Workstation Fusion ESXi Virtualization

Revision history

  1. #1

    Initial Publication

References