CVE-2025-7773: high-severity vulnerability in Rockwell Automation 5032-CFGB16M12DR
Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.4%
A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
Rockwell Automation · 5032-CFGB16M12DRRockwell Automation · 5032-CFGB16M12M12LDRRockwell Automation · 5032-CFGB16M12P5DRRelated CVEs — Rockwell Automation 5032-CFGB16M12DR
In the same product, most dangerous first.