Critical · published October 14, 2025
🚨 Multiple broken authentication vulnerabilities lurk in this system, opening the door wide for a potential admin account takeover and even denial of service! 🔥 Think of it like a restaurant where the head chef has forgotten to lock the kitchen door. Anyone can stroll in and mess with the recipes, or worse, change the menu entirely, leading to disastrous outcomes for diners! An attacker could seize control of admin accounts, leading to unauthorized configuration changes that could leave your devices disoriented and unable to communicate. This could result in devices being misrouted or completely disconnected from the network — an absolute nightmare! 😱
Think of it like a restaurant where the head chef has forgotten to lock the kitchen door. Anyone can stroll in and mess with the recipes, or worse, change the menu entirely, leading to disastrous outcomes for diners! These vulnerabilities stem from missing authentication checks on critical functions, allowing unauthorized users to modify NAT rules and potentially execute a denial-of-service attack.
An attacker could seize control of admin accounts, leading to unauthorized configuration changes that could leave your devices disoriented and unable to communicate. This could result in devices being misrouted or completely disconnected from the network — an absolute nightmare! 😱 Immediately patch the affected product to the latest version provided by the vendor. Additionally, review authentication controls and ensure all critical functions are secured against unauthorized access. 💡 You've got this! Follow these steps and secure your system like the true hero you are! 🦸♂️
| Product | Versions | Fixed in |
|---|---|---|
| rockwellautomation/1783-natr_firmware | < 1.007 | 1.007 |