Vulnerability · Published Dec 15, 2025 · Assigned by Rockwell

CVE-2025-13824Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities

High 8.7

In plain English

A high-severity security flaw in Micro820®, Micro850®, Micro870® from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.3%top 71.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.

Affected products (as reported)

Vendor	Product	Versions
Rockwell Automation	Micro820®, Micro850®, Micro870®	V23.011 and belowV12.013 and lowerV14.011 and lower

Weakness: CWE-763 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1766.html