PT-2025-51236 · Allen Bradley · Micro870+1

Published 2025-12-15 · Updated 2025-12-15 · CVE-2025-13823

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Micro850 and Micro870 controllers (affected versions not specified)

Description An issue exists in the IPv6 stack of the Micro850 and Micro870 controllers. The controllers may enter a recoverable fault state (fault code 0xFE60) when receiving multiple malformed packets during fuzzing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1395

Related Identifiers

CVE-2025-13823

Affected Products

Micro850

Micro870

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-13823 · Security Note
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1766.html · Note
• https://twitter.com/CVEnew/status/2000611194848375183 · Twitter Post
• https://t.me/CVEtracker/39845 · Telegram Post