CVE-2025-7774 Details
Description
A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions.
A vulnerability exists in the web server of the Rockwell Automation 5032 16pt Digital Configurable module. This issue allows intercepted session credentials to be used within a three-minute timeout window, enabling unauthorized users to perform privileged actions.
Users should update to version 1.012. If an upgrade is not possible, security best practices should be applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Aug 14, 2025CISA-ADP
Assessed Aug 14, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Rockwell Automation 5032-CFGB16M12P5DR | All versions |
CPE
Remediation
| |
| Rockwell Automation 5032-CFGB16M12DR | All versions |
CPE
Remediation
| |
| Rockwell Automation 5032-CFGB16M12M12LDR | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 14, 2025 | New CVE Received | [email protected] |