45 matches found
Rockwell Automation Micro850/870 Dependency on Vulnerable Third-Party Component (CVE-2025-13823)
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers. This issue occurs when the controllers receive multiple malformed packets, causing the controller to enter a recoverable fault fault code 0xFE60. To recover the controller, the fault must be cleared. This plugi...
EUVD-2025-210463
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
CVE-2025-11698
The CVE-2025-11698 vulnerability affects 5380/5480/5580 controllers with boot firmware versions below 1.072. It enables a denial-of-service by allowing a malicious actor to write invalid file data to the controller, potentially causing a major non-recoverable fault (MNRF). The documents do not pr...
EUVD-2025-210461
A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault MNRF...
CVE-2025-12011: Buffer Copy without Checking Size of Input
A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault MNRF...
CVE-2025-12012: Buffer Copy without Checking Size of Input
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault MNRF...
CVE-2025-13823
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...
CVE-2025-13824
A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and...
EUVD-2025-203386
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...
CVE-2025-13823
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...
CVE-2025-13823 Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...
CVE-2025-13823 Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...
PT-2025-51236
Name of the Vulnerable Software and Affected Versions Micro850 and Micro870 controllers affected versions not specified Description An issue exists in the IPv6 stack of the Micro850 and Micro870 controllers. The controllers may enter a recoverable fault state fault code 0xFE60 when receiving...
PT-2025-51237
Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description A security issue arises from improper handling of malformed CIP packets during fuzzing. This causes the controller to enter a hard fault, indicated by a solid red Fault LED and...
CVE-2025-13823: Dependency on Vulnerable Third-Party Component
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received multiple malformed packets during fuzzing. The controllers will go into recoverable fault with fault code 0xFE60. To recover the controller, clear the fault...
CVE-2025-9124
A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault...
CVE-2025-9124
CVE-2025-9124 affects Rockwell Automation’s Compact GuardLogix 5370 controllers. The vulnerability stems from a fault when a crafted CIP unconnected explicit message is sent, leading to a denial-of-service and a major non-recoverable fault. According to the connected documents, the CVSS v4.0 base...
PT-2025-41918
Name of the Vulnerable Software and Affected Versions versions prior to 2025-9124 Description A security issue can lead to a denial-of-service condition. This occurs due to a fault when a specifically crafted CIP unconnected explicit message is sent, potentially resulting in a major,...