CVE-2025-7693CWE-20

Rockwell Automation Micro800 Vulnerability

Critical · published August 18, 2025

CVSS v4.0
9.3
EPSS
0%
Percentile
29.3
In the wild
Unconfirmed
What it is

A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF015. To recover, clear the fault.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00366 · 29.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-08-18T17:53Z
EPSS history
Timeline
  • 18 AUG 17:53Z
    Rockwell Automation Micro800 Vulnerability
    cvelistv5