CVE-2025-7328: Rockwell Automation Comms - 1783-NATR Multiple Broken Authentication Vulnerabilities

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-14 · updated 2026-10-08
Weakness: CWE-306

Description

Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able to communicate through NATR as a result of denial-of-service or NAT rule modifications. NAT rule modification could also result in device communication to incorrect endpoints. Admin account takeover could allow modification of configuration and require physical access to restore.

Affected products

Rockwell Automation Comms - 1783-NATR: before 1.007 — fixed in 1.007

How to fix

Upgrade to a fixed version: Rockwell Automation Comms - 1783-NATR 1.007. Check the vendor advisory for mitigations.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1756.html

Get alerted when CVE-2025-7328 or the next vulnerability affects your stack