CVE-2025-7773

Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities

CVSS 8.8 HIGHEPSS 0.4%CWE-863

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Aug 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Affected products

Rockwell Automation · 5032-CFGB16M12DR Rockwell Automation · 5032-CFGB16M12M12LDR Rockwell Automation · 5032-CFGB16M12P5DR

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html