Description
A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.
Scores
CVSS v4
8.7
EPSS
0.0008
EPSS Percentile
23.7%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-763
Status
published
Products (3)
Rockwell Automation/Micro820®, Micro850®, Micro870®
V12.013 and lower
Rockwell Automation/Micro820®, Micro850®, Micro870®
V14.011 and lower
Rockwell Automation/Micro820®, Micro850®, Micro870®
V23.011 and below
Published
Dec 15, 2025
Tracked Since
Feb 18, 2026