Rockwell Automation Comms - 1783-NATR Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in the Rockwell Automation Comms - 1783-NATR product, all versions through 1.006. This vulnerability arises from the absence of CSRF protection on a specific form, allowing attackers to manipulate configurations unintentionally. Exploitation requires convincing a logged-in administrator to click on a malicious link.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in configuration, potentially allowing attackers to manipulate NAT rules or disrupt device communication.

Remediation

Users can upgrade to version 1.007 or later to address this vulnerability. For those unable to upgrade, Rockwell Automation recommends following their security best practices.