CVE-2025-7329
Medium
Description
A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation requires an attacker to be able to update configuration fields behind admin login.
SeverityMedium
CVSS4.8
Exploit probability—
ProductRockwellautomation 1783-natr Firmware
PublishedOct 14, 2025
First seenOct 14, 2025
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- rockwellautomation 1783-natr_firmware1.007 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation 1783-natr_firmware | v < 1.007 | 1.007 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.