Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-13901

CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends mali

Description

CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Modicon M241/M251

Default version status: unaffected

  • Versions prior to 5.4.13.12affected

Schneider Electric Modicon M262

Default version status: unaffected

  • Versions prior to 5.4.10.12affected

References