Skip to content
OpenAdvisories
Medium ICSA-25-175-03 6 CVEs

Schneider Electric Modicon Controllers (Update A)

Published Jun 10, 2025 · Updated Jul 8, 2025 · Revision 2

Vendor: Schneider Electric Product: EcoStruxure Automation Expert - Motion Product: EcoStruxure Machine Expert Product: Modicon Controllers LMC058 Product: Modicon Controllers M241 Product: Modicon Controllers M251 Product: Modicon Controllers M258 Product: Modicon Controllers M262

Summary

Schneider Electric is aware of multiple vulnerabilities in its Modicon Controllers M241 / M251 / M258 / LMC058
/ M262 products.

The Modicon Controllers M241/M251/M258/M262 https://www.se.com/ww/en/product-category/3900-plc-pac-and-dedicated-controllers/ and Modicon LMC058 https://www.se.com/ww/en/product-range/7744-modicon-lmc058/ products are Programmable Logic
Controllers for performance-demanding applications.

Failure to apply remediation/mitigations provided below may risk Cross-Site Scripting, Denial of Service or
uncontrolled resource consumption which could result in loss of confidentiality, integrity and availability of the
controller.

Vulnerabilities 6

Revision history

  1. #2.0.0

    A remediation is now available within EcoStruxure™ Machine Expert v2.3 used to update the M241/M251 firmware.

  2. #1.0.0

    Original Release

References