XSS in Rockwell Automation Comms - 1783-Natr
CVE-2025-7329
A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation requires an attacker to be able to update configuration fields behind admin login.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.002 (15.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Rockwell Automation Comms - 1783-natr — versions Version 1.006 and prior
- Rockwellautomation 1783-natr
- Rockwellautomation 1783-natr_firmware
Weakness classification (CWE)
References
- PSIRT@rockwellautomation.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-7329?
- CVE-2025-7329 is a medium-severity vulnerability in Rockwell Automation Comms - 1783-Natr, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2025-10-14.
- How severe is CVE-2025-7329?
- Medium severity. CVSS v3 base score is 4.8 out of 10.