CVE-2025-7330CWE-352csrf

CVE-2025-7330

Medium · published October 14, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2025-10-14T17:15Z
Affected products (1)
ProductVersionsFixed in
rockwellautomation/1783-natr_firmware< 1.0071.007
References (1)
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1756.html · [email protected]
EPSS history
Timeline
  • 14 OCT 12:43Z
    Rockwell Automation 1783-NATR Cross-Site Request Forgery Vulnerability
    cvelistv5