Description
A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials can be used within a 3-minute timeout window, allowing unauthorized users to perform privileged actions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | 5032-CFGB16M12P5DR | 1.011 | — |
| Rockwell Automation | 5032-CFGB16M12DR | 1.011 | — |
| Rockwell Automation | 5032-CFGB16M12M12LDR | 1.011 | — |
Advisories 1
- ICSA-25-226-27 Rockwell Automation ArmorBlock 5000 I/O - Webserver CISA ICS & IT advisories · Aug 14, 2025