CVE-2025-13824 — Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities

CVE-2025-13824

Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities PUBLISHED

Description (CNA)

A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / Micro820®, Micro850®, Micro870®	affected V23.011 and below; affected V12.013 and lower; affected V14.011 and lower

CWE

CWE-763

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1766.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.