Rockwell Automation Micro850 and Micro870 Controllers IPv6 Stack Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the IPv6 stack of Rockwell Automation Micro850 and Micro870 controllers. When these controllers receive multiple malformed packets, they enter a recoverable fault state, indicated by fault code 0xFE60. To restore normal operation, the fault must be cleared.

Impact

Exploitation of this vulnerability causes the affected controllers to enter a recoverable fault state, disrupting normal operation. The fault can be cleared to restore functionality.

Remediation

Users are advised to upgrade to Micro850/870 controllers (L50E/L70E) version 23.012. For those using Micro850/870 (LC50/LC70) or Micro820 (LC20) controllers, migration to the newer Micro850/870 or Micro820 models is recommended.