CVE-2025-13824
High
Description
A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.
SeverityHigh
CVSS8.7
Exploit probability—
ProductMicro820®, Micro850®, Micro870®
PublishedDec 15, 2025
First seenDec 15, 2025
Weakness typeCWE-763CWE-763
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Rockwell Automation Micro820®, Micro850®, Micro870® | V23.011 and below, V12.013 and lower, V14.011 and lower | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.