CVE-2025-7350 HIGH

CVE-2025-7350: Rockwell Automation Stratix® IOS Cross-Site Request Forgery to Code Execution Vulnerability

Vendor Rockwell Automation
Product Stratix IOS
Weakness CWE-74
Published September 9, 2025
Last update September 9, 2025

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by uploading and running malicious configurations without authentication.

Key dates

02Disclosure timeline

September 9, 2025 CVE published
September 9, 2025 Record updated