CVE-2025-7774 — Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities

CVE-2025-7774

Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities PUBLISHED

Description (CNA)

A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / 5032-CFGB16M12P5DR	affected 1.011
Rockwell Automation / 5032-CFGB16M12DR	affected 1.011
Rockwell Automation / 5032-CFGB16M12M12LDR	affected 1.011

CWE

CWE-306

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.