CVE 8.6 HIGH

Rockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution Vulnerability_CVE-2025-7350

8.6 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by uploading and running malicious configurations without authentication.

Basic Information

ID CVE-2025-7350
Source Rockwell
Published Sep 9, 2025 at 12:53
Modified Sep 9, 2025 at 13:21

Affected Product

Vendor Rockwell Automation
Product Stratix IOS
Version 15.2(8)E5 and below
Affected Versions Rockwell Automation Stratix IOS 15.2(8)E5 and below

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.