CVE-2025-7773

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.

Metrics

CVSS 4.0 8.8/10CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-863

Affected software

VendorProductVersions
Rockwell Automation5032-CFGB16M12P5DR1.011
Rockwell Automation5032-CFGB16M12DR1.011
Rockwell Automation5032-CFGB16M12M12LDR1.011

References

Timeline

Published
Aug 14, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-77748.8A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a CVE-2025-77759.8Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaleCVE-2025-77769.8Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway whCVE-2025-77776.5The mirror-registry doesn't properly sanitize the host header HTTP header in HTTP request received, allowing an attacker to perform maliciouCVE-2025-77789.8The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and improper path validatiCVE-2025-77798.8Local privilege escalation due to insecure XPC service configuration. The following products are affected: Acronis True Image (macOS) beforeCVE-2025-77806.5The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTrCVE-2025-77816.4The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Stored Cross-Site Scripting via the ‘cs_job_title’ parameCVE-2025-77827.6The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capabiCVE-2025-77839.4Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with CVE-2025-77846.5A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are enabled. An administrCVE-2025-77854.3A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the fil
CVE-2025-7773: High severity, CVSS 8.8 | Vulnix