CVE-2025-13824

Katalog CVE

CVSS 8.7 · High EPSS 0,34%

Kerentanan Release of Invalid Pointer or Reference. Skor CVSS 4.0 8.7 (High) menurut rockwellautomation.com.

Deskripsi (NVD)

A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard fault with solid red Fault LED and becomes unresponsive. Upon power cycle, the controller will enter recoverable fault where the MS LED and Fault LED become flashing red and reports fault code 0xF019. To recover, clear the fault.

Rincian

Terbit di NVD

15 Desember 2025

Terakhir diubah

7 Oktober 2026

Status NVD

Deferred

CVSS 4.0

8.7 (High), sumber rockwellautomation.com
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-763: Release of Invalid Pointer or Reference

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 26,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1766.html