Skip to content
OpenAdvisories
High · 8.7 CVE-2025-13824 EUVD-2025-203385GHSA-qjvf-9q24-j5qm

Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities

Published Dec 15, 2025 · Updated Dec 15, 2025 · Assigned by Rockwell

Description

A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.

Affected products

VendorProductAffectedFixed
Rockwell Automation Micro820®, Micro850®, Micro870® V23.011 and below, V12.013 and lower, V14.011 and lower —

Advisories 1

References