Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-3116

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an

Description

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special malformed HTTPS request containing improper formatted body data to the controller.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Modicon Controllers M241/M251

Default version status: unaffected

  • Versions prior to 5.3.12.51affected

Schneider Electric Modicon Controllers M258 / LMC058

Default version status: unaffected

  • All Versionsaffected

References