Rockwell Automation Micro820, Micro850, Micro870

Two high-severity vulnerabilities (CVE-2025-13823 and CVE-2025-13824) affect Rockwell Automation Micro820, Micro850, and Micro870 controllers. CVE-2025-13823 involves malformed IPv6 packets causing recoverable faults, while CVE-2025-13824 involves improper handling of malformed CIP packets causing hard faults. Both vulnerabilities can result in denial-of-service conditions. The vulnerabilities affect critical manufacturing infrastructure worldwide. Rockwell Automation has provided firmware updates and mitigation strategies including disabling IPv6 functionality and updating to newer controller versions.