CVE-2025-7693

A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF015. To recover, clear the fault.

• CWE-20

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1736.html

Published

Aug 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7687The Latest Post Accordian Slider plugin for WordPress is vul…6.1
• CVE-2025-7688The Add User Meta plugin for WordPress is vulnerable to Cros…6.1
• CVE-2025-7689The Hydra Booking plugin for WordPress is vulnerable to Priv…8.8
• CVE-2025-7690The Affiliate Plus plugin for WordPress is vulnerable to Cro…6.1
• CVE-2025-7691A privilege escalation issue has been discovered in GitLab E…8.8
• CVE-2025-7692The Orion Login with SMS plugin for WordPress is vulnerable …8.1
• CVE-2025-7694The Woffice Core plugin for WordPress is vulnerable to arbit…7.5
• CVE-2025-7695The Dataverse Integration plugin for WordPress is vulnerable…8.8
• CVE-2025-7696The Integration for Pipedrive and Contact Form 7, WPForms, E…9.8
• CVE-2025-7697The Integration for Google Sheets and Contact Form 7, WPForm…9.8
• CVE-2025-7698Out-of-bounds read vulnerabilities in print processing of Ge…5.9
• CVE-2025-7699An improper access control vulnerability was found in the E…7.1