CVE-2025-13824highCWE-763

CVE-2025-13824: high-severity vulnerability in Rockwell Automation Micro820®, Micro850®…

Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities

Published

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.3%
A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Related CVEs — Rockwell Automation Micro820®, Micro850®…

In the same product, most dangerous first.