Vulnerability · Published Aug 14, 2025 · Assigned by Rockwell
CVE-2025-7773Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities
High 8.8
In plain English
A high-severity incorrect authorization in 5032-CFGB16M12DR from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS 4.0)8.8High
Exploit odds (30 days)0.4%top 61.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | 5032-CFGB16M12P5DR | 1.011 |
| Rockwell Automation | 5032-CFGB16M12DR | 1.011 |
| Rockwell Automation | 5032-CFGB16M12M12LDR | 1.011 |
Weakness: CWE-863 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N