Skip to content
OpenAdvisories
Critical ICSA-24-352-04 1 CVE

Schneider Electric Modicon

Published Dec 10, 2024 · Updated Oct 14, 2025 · Revision 3

Vendor: Schneider Electric Product: Modicon Controllers LMC058 Product: Modicon Controllers M241 Product: Modicon Controllers M251 Product: Modicon Controllers M258

Summary

Schneider Electric is aware of a vulnerability in its Modicon M241 / M251 / M258 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https://www.se.com/ww/en/product-range/7744-modicon-lmc058/
products.

The Modicon M241/M251/M258/LMC058 products are Programmable Logic Controllers for performance-demanding applications.

Failure to apply the Fix provided below may risk a denial of service and partial loss of Integrity of the controller, which could result in disruption operations.

October 2025 Update: A remediation is now available for Modicon M258 / LMC058

Vulnerabilities 1

Revision history

  1. #3.0.0

    A remediation is now available for Modicon M258 / LMC058

  2. #2.0.0

    A remediation is now available for Modicon M241 / M251.

  3. #1.0.0

    Original Release

References