CVE-2025-7353CWE-1188

Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability

Critical · published August 14, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00851 · 57.8th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2025-08-14T13:23Z
EPSS history
Timeline
  • 14 AUG 13:23Z
    Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability
    cvelistv5