CNNVD-202512-2681 Information

CNNVD ID

CNNVD-202512-2681

CVE-2025-13824

  • CNNVD Published: 2025-12-15

Description (Chinese)

Rockwell Automation Micro820等都是美国罗克韦尔(Rockwell Automation)公司的一款可编程控制器。 Rockwell Automation多款产品存在安全漏洞,该漏洞源于处理畸形CIP数据包不当,可能导致控制器进入不可恢复故障状态。以下产品受到影响:Micro820、Micro850和Micro870。

Description (English)

Rockwell Automation Micro820 is a programmable controller for Rockwell Automation, United States. There is a safety gap in Rockwell Automation ’ s multiple products, which stems from inappropriate CIP data packages to deal with malformations, which may result in the controller entering non-restorable failure. The following products were affected: Micro820, Micro850 and Micro870.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

罗克韦尔

Published

2025-12-15

Last Modified

2026-02-24

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1766.html https://access.redhat.com/security/cve/cve-2025-13824

Patch

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1766.html

Share on: