CVE-2025-7330
Medium
Description
A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link.
SeverityMedium
CVSS6.5
Exploit probability—
ProductRockwellautomation 1783-natr Firmware
PublishedOct 14, 2025
First seenOct 14, 2025
Weakness typeCWE-352Cross-site request forgery (CSRF)
How to fix
Update
- rockwellautomation 1783-natr_firmware1.007 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation 1783-natr_firmware | v < 1.007 | 1.007 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.