Skip to content
OpenAdvisories
High · 7.5 CVE-2025-2875 EUVD-2025-14678GHSA-cjwm-r7h6-vpg7

CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality wh…

Published May 14, 2025 · Updated May 14, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: Modicon Controllers M241 / M251 Product: Modicon Controllers M258 / LMC058 Category: ICS / OT

Description

CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could
cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to
access resources.

Affected products

VendorProductAffectedFixed
Schneider Electric Modicon Controllers M241 / M251 Versions prior to v5.3.12.48 —
Schneider Electric Modicon Controllers M258 / LMC058 All versions —

Advisories 2

References