Vulnerability Details CVE-2025-7330
A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.4%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2025-7330
-
cpe:2.3:h:rockwellautomation:1783-natr:-
-
cpe:2.3:o:rockwellautomation:1783-natr_firmware:1.002
-
cpe:2.3:o:rockwellautomation:1783-natr_firmware:1.003
-
cpe:2.3:o:rockwellautomation:1783-natr_firmware:1.005
-
cpe:2.3:o:rockwellautomation:1783-natr_firmware:1.006