Rockwell Automation MICRO820, MICRO850, MICRO870 vulnerabilities

2 CVEs affecting Rockwell Automation MICRO820, MICRO850, MICRO870, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13824, published 2025-12-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-13824, published 2025-12-15. High severity, CVSS 8.7. EPSS: 0.3% chance of exploitation in the next 30 days. A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the…
CVE-2025-13823, published 2025-12-15. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable…