CVE-2025-7773
A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.
- Score
- CVSS 4.0 8.8 High
- Status
- Deferred - PSIRT@rockwellautomation.com
- Published
- 2025-08-14
- Last modified
- 2025-08-14
- Weaknesses
- CWE-863
Affected products
- 5032-cfgb16m12dr (Rockwell Automation)
- 5032-cfgb16m12m12ldr (Rockwell Automation)
- 5032-cfgb16m12p5dr (Rockwell Automation)
References
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html