Multiple Broken Authentication Issues in Rockwell Automation Products

CVE-2025-7328

What is CVE-2025-7328?

Multiple broken authentication security issues are present in Rockwell Automation products due to inadequate authentication checks on critical functions. These vulnerabilities could lead to significant consequences, including potential denial-of-service attacks, unauthorized admin account takeover, and harmful modifications to NAT rules. This could obstruct device communication and redirect it to incorrect endpoints, posing serious operational challenges. Additionally, unauthorized access to admin accounts would allow malicious actors to alter configurations, potentially necessitating physical access to restore affected systems.

References