Description
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an
authenticated malicious user sends manipulated HTTPS Content-Length header to the webserver.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Modicon Controllers M241/M251 | Versions prior to 5.3.12.51 | — |
Advisories 2
- ICSA-25-175-03 Schneider Electric Modicon Controllers (Update A) CISA ICS & IT advisories · Jul 8, 2025
- SEVD-2025-161-02 Modicon Controllers M241/M251/M258/LMC058/M262 Schneider Electric CPCERT · Jul 8, 2025