CVE-2025-7773 - Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities

Back Back to CVE browser

HIGH

Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities

Published Aug 14, 2025

8.8

HIGH

CVSS 4.0

EPSS 0.41%

Description

A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.

Affected products

Vendor Rockwell Automation Product n/a Default
unaffected
- Version
  1.011
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Rockwell Automation

n/a

unaffected

Version	Status	Constraints
1.011	affected	-

Remediation

Vendor solution

1.012 or later

Weaknesses (1)

CWE-863

Incorrect Authorization

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24816		Advisory
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1733.html