CVE Program partner

Armis

Armis, Inc.

API
CVEs, 365 days011 all time, 1 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
OrganisationArmis, Inc.
RoleCNA
TypeVendor, Researcher
Reports toicscert → CISA
ScopeAll Armis products, as well as vulnerabilities in third-party software discovered by Armis that are not in another CNA’s scope.
Advisorieshttps://www.armis.com/legal-compliance/security-advisories/

Latest CVEs · RSS

  • CVE-2025-52551 2025-09-02 · CVSS 9.3
    E2 Facility Management Systems use a proprietary protocol that allows for unauthenticated file operations on any file in the file system.
  • CVE-2025-52550 2025-09-02 · CVSS 8.6
    E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned. An attacker can forge malicious firmware upgrade packages. An at
  • CVE-2025-52549 2025-09-02 · CVSS 9.2
    E3 Site Supervisor Control (firmware version < 2.31F01) generates the root linux password on each boot. An attacker can generate the root linux password for a v
  • CVE-2025-52548 2025-09-02 · CVSS 6.9
    E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but
  • CVE-2025-52547 2025-09-02 · CVSS 8.7
    E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation. An attacker can use this command to continuously c
  • CVE-2025-52546 2025-09-02 · CVSS 5.1
    E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uplo
  • CVE-2025-52545 2025-09-02 · CVSS 7.7
    E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for
  • CVE-2025-52544 2025-09-02 · CVSS 8.8
    E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uplo
  • CVE-2025-52543 2025-09-02 · CVSS 5.3
    E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenti
  • CVE-2025-6519 2025-09-02 · CVSS 9.3
    E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the pass

All CVE Program partners