High severity · published Dec 15, 2025
CVE-2025-13824
Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
8.7
CVSS
0.3%
EPSS
No
On KEV
Description
A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Micro820®, Micro850®, Micro870® · Rockwell Automation
V23.011 and below; V12.013 and lower; V14.011 and lower · source: vendor
Affected product
MM
Micro820®, Micro850®, Micro870®
Rockwell Automation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-13824
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-13824
www.rockwellautomation.com
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1766.html
More from Micro820®, Micro850®, Micro870®
7.1
CVE-2025-13823
Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities