High severity · published Aug 14, 2025
CVE-2025-7774
Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
50
5032-CFGB16M12DR · Rockwell Automation
1.011 · source: vendor
50
5032-CFGB16M12M12LDR · Rockwell Automation
1.011 · source: vendor
50
5032-CFGB16M12P5DR · Rockwell Automation
1.011 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-7774
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-7774
www.rockwellautomation.com
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html
More from 5032-CFGB16M12DR
8.8
CVE-2025-7773
Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities