XSS in Rockwell Automation Comms - 1783-Natr
CVE-2025-7329
A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation requires an attacker to be able to update configuration fields behind admin login.
Vulnerability class: XSS (Cross-Site Scripting)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.003 (16.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 16th percentile — 16.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.003 · change: +0.000
Affected products
- Rockwell Automation Comms - 1783-Natr — versions Version 1.006 and prior
- Rockwellautomation 1783-Natr
- Rockwellautomation 1783-Natr Firmware
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-7329?
- CVE-2025-7329 is a medium-severity vulnerability in Rockwell Automation Comms - 1783-Natr, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2025-10-14.
- How severe is CVE-2025-7329?
- Medium severity. CVSS v3 base score is 4.8 out of 10.