PT-2025-41911 · Rockwell Automation · 1783-Natr+2

Published 2025-10-14 · Updated 2025-10-30 · CVE-2025-7329

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description A Stored Cross-Site Scripting issue exists that could allow a malicious user to view and modify sensitive data or make the webpage unavailable. The issue is due to missing special character filtering and encoding. Exploitation requires an attacker to be able to update configuration fields behind an admin login.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-16037

CVE-2025-7329

Affected Products

1783-Natr

1783-Natr Firmware

Comms - 1783-Natr

References · 7

• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1756.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7329 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7329 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16037 · Security Note
• https://twitter.com/VulmonFeeds/status/1978153919160164493 · Twitter Post
• https://t.me/cveNotify/141057 · Telegram Post
• https://twitter.com/CveFindCom/status/1978085700349145344 · Twitter Post