CVE-2025-7353

CVE Enrichment

CVSS: 9.3 CRITICAL
EPSS: 0.85%
EPSS Percentile: 57.54%
CISA KEV: Not listed

Description

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Modules. If a specific IP address is used to connect to the WDB agent, it can allow remote attackers to perform memory dumps, modify memory, and control execution flow.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 14-Aug-2025 21:15
Last Modified: 17-Jun-2026 17:04
EPSS Date: 2026-10-20
CWE: CWE-1188

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:L /
                            AT:N /
                            PR:N /
                            UI:N /
                            VC:H /
                            VI:H /
                            VA:H /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

References

[email protected]

Last enrichment sync: 21-Oct-2026 16:34
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

| **CVE-2025-7353** | 9.3 | CWE-1188: Initialization of a Resource with an Insecure Default | Rockwell Automation ControlLogix Ethernet Modules | Nozomi H2 2025 Report Highlights Credential Exposure and OT/IoT Security Gaps

CVE (7)

Malware (10)

Threat Actors (8)

MITRE ATT&CK (12)

Vendors (6)

Products (10)

Tools (2)

Industries (3)

Countries (17)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.