Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-7328

Опубликовано: 14 окт. 2025
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able to communicate through NATR as a result of denial-of-service or NAT rule modifications. NAT rule modification could also result in device communication to incorrect endpoints. Admin account takeover could allow modification of configuration and require physical access to restore.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:rockwellautomation:1783-natr_firmware:*:*:*:*:*:*:*:*
Версия до 1.007 (исключая)
cpe:2.3:h:rockwellautomation:1783-natr:-:*:*:*:*:*:*:*

EPSS

Процентиль: 9%
0.00031
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 9.8
github
4 месяца назад

Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able to communicate through NATR as a result of denial-of-service or NAT rule modifications. NAT rule modification could also result in device communication to incorrect endpoints. Admin account takeover could allow modification of configuration and require physical access to restore.

CVSS3: 10
fstec
4 месяца назад

Уязвимость промышленной сетевой точки доступа Wi-Fi Rockwell Automation 1783-NATR, связанная с отсутствием аутентификации для критичной функции, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 9%
0.00031
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-306