Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-3898

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an

Description

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing invalid data type to the webserver.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Modicon Controllers M241/M251

Default version status: unaffected

  • Versions prior to 5.3.12.51affected

Schneider Electric Modicon Controllers M262

Default version status: unaffected

  • Versions prior to 5.3.9.18affected

References