Armis, Inc.
First CVE: Sep 2, 2025Active for: 1 year
10
CVEs Published
More CVEs Published than 27% of tracked CNAs
10.0
Avg CVEs / Year
More Avg CVEs / Year than 54% of tracked CNAs
7.7
Avg CVSS Score
Higher Avg CVSS Score than 78% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Trends Over Time
The number and severity of CVEs published by Armis, Inc. over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 2, 2025
10 months ago
Most Recent CVE
Sep 2, 2025
325 days ago
Top CVEs
All CVEs published by Armis, Inc. as a CNA, regardless of affected vendor or product.
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-52549CRITICAL E3 Site Supervisor Control (firmware version < 2.31F01) generates the root linux password on each boot. An attacker can generate the root linux password for a vulnerable device bas | Sep 2, 2025 | 9.8 | 34 | NO | NO |
CVE-2025-6519CRITICAL E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The | Sep 2, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-52551CRITICAL E2 Facility Management Systems use a proprietary protocol that allows for unauthenticated file operations on any file in the file system. | Sep 2, 2025 | 9.3 | 28 | NO | NO |
CVE-2025-52547HIGH E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application | Sep 2, 2025 | 7.5 | 24 | NO | NO |
CVE-2025-52545HIGH E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application ser | Sep 2, 2025 | 7.5 | 24 | NO | NO |
CVE-2025-52544HIGH E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially cr | Sep 2, 2025 | 7.5 | 24 | NO | NO |
CVE-2025-52543HIGH E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenticate by obtaining on | Sep 2, 2025 | 7.5 | 24 | NO | NO |
CVE-2025-52550HIGH E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned. An attacker can forge malicious firmware upgrade packages. An attacker with admin ac | Sep 2, 2025 | 7.2 | 23 | NO | NO |
CVE-2025-52546MEDIUM E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially cr | Sep 2, 2025 | 6.1 | 21 | NO | NO |
CVE-2025-52548MEDIUM E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by def | Sep 2, 2025 | 4.9 | 18 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA10 CVEs
20%
50%
30%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network10 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (90.0%)
Unknown0 (0.0%)
Required1 (10.0%)
Privileges Required
Low0 (0.0%)
High2 (20.0%)
None8 (80.0%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Armis, Inc. as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Armis, Inc. as a CNA — matched by CVE ID, not by organization name.