A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and becomes unresponsive. Upon power cycle, the controller will enter a recoverable fault state, indicated by flashing red LEDs and fault code 0xF015. To recover, the fault must be cleared.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.3 | CVE-2025-7693 |
Exploitation
To exploit this vulnerability, an attacker can send malformed CIP Forward Close packets over the network to the affected controller. This can lead to the controller entering a fault state, making it unresponsive and requiring a power cycle to recover.
Affected Products
- Rockwell Automation Controllers: These devices may become unresponsive when subjected to malformed packets, leading to operational disruptions.
Mitigation
To mitigate this vulnerability, it is recommended to implement network security measures that restrict unauthorized access to the controllers and monitor network traffic for unusual patterns that may indicate an attack.