CVE-2025-7330highCWE-352

CVE-2025-7330: high-severity vulnerability in Rockwell Automation Comms - 1783-NATR

Rockwell Automation 1783-NATR Cross-Site Request Forgery Vulnerability

Published

Follow this CVE+ Monitor Comms - 1783-NATR

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7epss 0.2%
A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Rockwell Automation · Comms - 1783-NATR
Related CVEs — Rockwell Automation Comms - 1783-NATR

In the same product, most dangerous first.

CVE-2025-7328CRITICALRockwell Automation Comms - 1783-NATR Multiple Broken Authentication VulnerabilitiesEPSS 0.5%CVE-2025-7329HIGHRockwell Automation Comms - 1783-NATR Stored Cross-Site Scripting VulnerabilityEPSS 0.3%