CVEvulnerability
CVE-2025-7773
8.8 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-08-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.8 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weaknesses
- CWE-863
Description
A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html www.rockwellautomation.com