CVE-2025-7773
Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities
- State
- Published
- Severity
- 8.8 High
- Published
- Aug 14, 2025
- Updated
- Aug 14, 2025
- Reserved
- Jul 17, 2025
Description
A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.8 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N | Rockwell |
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
5032-CFGB16M12P5DRRockwell Automation |
|
5032-CFGB16M12DRRockwell Automation |
|
5032-CFGB16M12M12LDRRockwell Automation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.