{"id":"CVE-2025-13824","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-13824","generatedAt":"2026-10-28T04:46:24.737Z","title":"A security issue exists due to improper handling of malformed CIP packets during fuzzing.","description":"A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.","published":"2025-12-15T16:15:50.000Z","lastModified":"2026-10-07T19:10:00.000Z","status":"Deferred","sourceIdentifier":"PSIRT@rockwellautomation.com","cvss":{"version":"4.0","score":8.7,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-763"],"affected":[],"epss":{"score":0.00342,"percentile":0.27504,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.34%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1766.html","source":"PSIRT@rockwellautomation.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-13824","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}