CVE-2025-7330: Rockwell Automation 1783-NATR Cross-Site Request Forgery Vulnerability

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-14 · updated 2026-10-08
Weakness: CWE-352

Description

A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link.

Affected products

Rockwell Automation Comms - 1783-NATR: before 1.007 — fixed in 1.007

How to fix

Upgrade to a fixed version: Rockwell Automation Comms - 1783-NATR 1.007. Check the vendor advisory for mitigations.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1756.html

Get alerted when CVE-2025-7330 or the next vulnerability affects your stack