Rockwell Automation ArmorBlock 5000 I/O - Webserver

Summary

Vulnerabilities 2

• High 8.8
  CVE-2025-7773

  Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities

  A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number increments at an interval that correlates to the last two consecutive sign in session interval, making it predictable.

  Rockwell Automation 5032-CFGB16M12P5DR 5032-CFGB16M12M12LDR 5032-CFGB16M12DR ICS / OT
  Aug 14, 2025
• High 8.8
  CVE-2025-7774

  Rockwell Automation ArmorBlock 5000 I/O – Web Server Vulnerabilities

  A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions.

  Rockwell Automation 5032-CFGB16M12P5DR 5032-CFGB16M12M12LDR 5032-CFGB16M12DR ICS / OT
  Aug 14, 2025

Revision history

1. 2025-08-14 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-226-27 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-27
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B