CVE-2025-7773: Rockwell Automation 5032-CFGB16M12DR

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.

Affected products

• Rockwell Automation 5032-CFGB16M12DR: version 1.011 only
• Rockwell Automation 5032-CFGB16M12M12LDR: version 1.011 only
• Rockwell Automation 5032-CFGB16M12P5DR: version 1.011 only

Published 2025-08-14. Last modified 2026-06-17.