Disclosure summary
Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able to communicate through NATR as a result of denial-of-service or NAT rule modifications. NAT rule modification could also result in device communication to incorrect endpoints. Admin account takeover could allow modification of configuration and require physical access to restore.
Source-reported weakness categories
CWE-306
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2025-7328
Open original source · Updated Oct 08, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| rockwellautomation | 1783-natr_firmware | * {"versionEndExcluding":"1.007"} |
Original records & references
- NIST NVD record
- CVE Program record
- www.rockwellautomation.com — Vendor Advisory
PUBLISHED 2025-10-14T09:15:38-04:00
MODIFIED 2026-10-08T08:10:00-04:00
INGESTED 2026-10-08T12:30:42-04:00