CVE-2025-13824CWE-763

CVE-2025-13824

published December 15, 2025

CVSS
8.7
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.4th percentile
Weakness
CWE-763 · Release of Invalid Pointer or Reference
Published
2025-12-15T21:15Z
References (1)
EPSS history
Timeline
  • 15 DEC 15:20Z
    Micro820®, Micro850®, Micro870® – Specialized Fuzzing Vulnerabilities
    cvelistv5