CVE-2025-7353

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-7353", "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0", "state": "PUBLISHED", "assignerShortName": "Rockwell", "dateReserved": "2025-07-08T12:24:08.365Z", "datePublished": "2025-08-14T13:23:26.940Z", "dateUpdated": "2026-02-26T17:48:36.010Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "1756-EN2T/D", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}, {"defaultStatus": "unaffected", "product": "1756-EN2F/C", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}, {"defaultStatus": "unaffected", "product": "1756-EN2TR/C", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}, {"defaultStatus": "unaffected", "product": "1756-EN3TR/B", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}, {"defaultStatus": "unaffected", "product": "1756-EN2TP/A", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}], "datePublic": "2025-08-14T13:11:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix\u00ae Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow. &nbsp;</p><br>"}], "value": "A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix\u00ae Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 9.3, "baseSeverity": "CRITICAL", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1188", "description": "CWE-1188: Initialization of a Resource with an Insecure Default", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "b73dd486-f505-4403-b634-40b078b177f0", "shortName": "Rockwell", "dateUpdated": "2025-08-14T13:49:37.413Z"}, "references": [{"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1732.html"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">12.001 and later</span><br>"}], "value": "12.001 and later"}], "source": {"advisory": "SD1732", "discovery": "INTERNAL"}, "title": "Rockwell Automation ControlLogix\u00ae Ethernet Remote Code Execution Vulnerability", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-7353", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-08-15T03:55:59.205927Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T17:48:36.010Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-7353", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-08-15T03:55:59.205927Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-14T13:33:51.359Z"}}], "cna": {"title": "Rockwell Automation ControlLogix\u00ae Ethernet Remote Code Execution Vulnerability", "source": {"advisory": "SD1732", "discovery": "INTERNAL"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Rockwell Automation", "product": "1756-EN2T/D", "versions": [{"status": "affected", "version": "Version 11.004 or below"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "1756-EN2F/C", "versions": [{"status": "affected", "version": "Version 11.004 or below"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "1756-EN2TR/C", "versions": [{"status": "affected", "version": "Version 11.004 or below"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "1756-EN3TR/B", "versions": [{"status": "affected", "version": "Version 11.004 or below"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "1756-EN2TP/A", "versions": [{"status": "affected", "version": "Version 11.004 or below"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "12.001 and later", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">12.001 and later</span><br>", "base64": false}]}], "datePublic": "2025-08-14T13:11:00.000Z", "references": [{"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1732.html"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix\u00ae Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow.", "supportingMedia": [{"type": "text/html", "value": "<p>A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix\u00ae Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow. &nbsp;</p><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1188", "description": "CWE-1188: Initialization of a Resource with an Insecure Default"}]}], "providerMetadata": {"orgId": "b73dd486-f505-4403-b634-40b078b177f0", "shortName": "Rockwell", "dateUpdated": "2025-08-14T13:49:37.413Z"}}}, "cveMetadata": {"cveId": "CVE-2025-7353", "state": "PUBLISHED", "dateUpdated": "2026-02-26T17:48:36.010Z", "dateReserved": "2025-07-08T12:24:08.365Z", "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0", "datePublished": "2025-08-14T13:23:26.940Z", "assignerShortName": "Rockwell"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "1756-EN2T/D", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}, {"defaultStatus": "unaffected", "product": "1756-EN2F/C", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}, {"defaultStatus": "unaffected", "product": "1756-EN2TR/C", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}, {"defaultStatus": "unaffected", "product": "1756-EN3TR/B", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}, {"defaultStatus": "unaffected", "product": "1756-EN2TP/A", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "Version 11.004 or below"}]}], "source": "PSIRT@rockwellautomation.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix\u00ae Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow."}, {"lang": "es", "value": "Existe un problema de seguridad debido al agente de depuraci\u00f3n web habilitado en los m\u00f3dulos Ethernet ControlLogix\u00ae de Rockwell Automation. Si se utiliza una direcci\u00f3n IP espec\u00edfica para conectarse al agente WDB, puede permitir que atacantes remotos realicen volcados de memoria, modifiquen la memoria y controlen el flujo de ejecuci\u00f3n."}], "id": "CVE-2025-7353", "lastModified": "2026-06-17T10:04:46.337", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "PSIRT@rockwellautomation.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-7353", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-08-15T03:55:59.205927Z", "version": "2.0.3"}}]}, "published": "2025-08-14T14:15:35.137", "references": [{"source": "PSIRT@rockwellautomation.com", "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1732.html"}], "sourceIdentifier": "PSIRT@rockwellautomation.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1188"}], "source": "PSIRT@rockwellautomation.com", "type": "Secondary"}]}

{}

{"created": "2025-08-16T21:41:16.951097+00:00", "updated": "2025-08-16T21:41:16.951165+00:00", "vendors": ["rockwellautomation", "rockwellautomation$PRODUCT$controllogix"]}