CVE-2025-7774: Rockwell Automation 5032-CFGB16M12DR

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions.

Affected products

• Rockwell Automation 5032-CFGB16M12DR: version 1.011 only
• Rockwell Automation 5032-CFGB16M12M12LDR: version 1.011 only
• Rockwell Automation 5032-CFGB16M12P5DR: version 1.011 only

Published 2025-08-14. Last modified 2026-06-17.