Description
A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | Comms - 1783-NATR | Version 1.006 and prior | — |
Advisories 2
- NCSC-2025-0344 Kwetsbaarheden verholpen in Rockwell Automation COMMS NCSC-NL (Netherlands) · Oct 31, 2025
- ICSA-25-294-01 Rockwell Automation 1783-NATR CISA ICS & IT advisories · Oct 23, 2025