What’s Vulnerable › Vulnerabilities

CVE-2025-13823: Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities

• Severity: high (CVSS 7.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-15 · updated 2026-10-07
• Weakness: CWE-1395

Description

A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault.

Affected products

• Rockwell Automation Micro820®, Micro850®, Micro870®: V23.011

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1766.html

Get alerted when CVE-2025-13823 or the next vulnerability affects your stack