CVE-2025-7328
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-14

Last updated on: 2025-10-29

Assigner: Rockwell Automation

Description
Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able to communicate through NATR as a result of denial-of-service or NAT rule modifications. NAT rule modification could also result in device communication to incorrect endpoints. Admin account takeover could allow modification of configuration and require physical access to restore.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-14
Last Modified
2025-10-29
Generated
2026-06-16
AI Q&A
2025-10-14
EPSS Evaluated
2026-06-14
NVD
CVE-2025-7328
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
rockwellautomation 1783-natr_firmware to 1.007 (exc)
rockwellautomation 1783-natr *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves multiple broken authentication issues caused by missing authentication checks on critical functions. This can allow attackers to perform denial-of-service attacks, take over admin accounts, or modify NAT rules without proper authorization.

Impact Analysis

The impacts include denial-of-service where devices cannot communicate through NAT, unauthorized modification of NAT rules causing communication to incorrect endpoints, and admin account takeover which allows attackers to change configurations and may require physical access to restore the device.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-7328. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart