Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-6625

CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Modicon M340

Default version status: unaffected

  • All versionsaffected

Schneider ELectric BMXNOR0200H: Ethernet / Serial RTU Module

Default version status: unaffected

  • All versionsaffected

Schneider Electric BMXNGD0100: M580 Global Data module

Default version status: unaffected

  • All versionsaffected

Schneider Electric BMXNOC0401: Modicon M340 X80 Ethernet Communication modules

Default version status: unaffected

  • All versionsaffected

Schneider Electric BMXNOE0100: Modbus/TCP Ethernet Modicon M340 module

Default version status: unaffected

  • Versions prior to 3.60affected

Schneider Electric BMXNOE0110: Modbus/TCP Ethernet Modicon M340 FactoryCast module

Default version status: unaffected

  • Versions prior to 6.80affected

References