CVE-2025-7330: Rockwell Automation 1783-NATR Cross-Site Request Forgery Vulnerability

Published Oct 14, 2025
·
Updated

A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link.

Affected Software

3 affected components
Rockwell Automation 1783-NATR
All of the following
rockwellautomation 1783-natr Firmware<1.007
rockwellautomation 1783-natr

Remediation

Information

Upgrade to version 1.007 and later https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx

Event History

Oct 14, 2025
CVE Published
via MITRE·12:43 PM
Data Sourced
via MITRE·12:43 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-7330?

CVE-2025-7330 is classified as a moderate severity cross-site request forgery vulnerability.

2

How do I fix CVE-2025-7330?

To mitigate CVE-2025-7330, implement CSRF protection by adding proper checks to the affected forms.

3

Who is affected by CVE-2025-7330?

CVE-2025-7330 affects users of Rockwell Automation's 1783-NATR product.

4

What can an attacker do with CVE-2025-7330?

An attacker can exploit CVE-2025-7330 to modify configurations by tricking a logged-in admin into visiting a malicious link.

5

How can I confirm if I am affected by CVE-2025-7330?

You can confirm if you are affected by CVE-2025-7330 by checking the product version of your Rockwell Automation 1783-NATR installation.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203