What’s Vulnerable › Vulnerabilities
CVE-2025-13824: Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
- Severity: high (CVSS 8.7 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-15 · updated 2026-10-07
- Weakness: CWE-763
Description
A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.
Affected products
- Rockwell Automation Micro820®, Micro850®, Micro870®: through V23.011; through V12.013; through V14.011
References
Get alerted when CVE-2025-13824 or the next vulnerability affects your stack