High severity · published Aug 14, 2025
CVE-2025-7773
Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
50
5032-CFGB16M12DR · Rockwell Automation
1.011 · source: vendor
50
5032-CFGB16M12M12LDR · Rockwell Automation
1.011 · source: vendor
50
5032-CFGB16M12P5DR · Rockwell Automation
1.011 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-7773
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-7773
www.rockwellautomation.com
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html
More from 5032-CFGB16M12DR
8.8
CVE-2025-7774
Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities