cvedb.io
CVE-2025-7329
MEDIUM · CVSS 4.8
EPSS exploitation probability: 0%
Published 2025-10-14T13:15:39.157 · Last modified 2026-06-17T10:04:44.733

Summary

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation requires an attacker to be able to update configuration fields behind admin login.

Affected products

rockwellautomation — 1783-natr_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when rockwellautomation ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.