Description
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an
authenticated malicious user sends HTTPS request containing invalid data type to the webserver.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Modicon Controllers M241/M251 | Versions prior to 5.3.12.51 | — |
| Schneider Electric | Modicon Controllers M262 | Versions prior to 5.3.9.18 | — |
Advisories 2
- ICSA-25-175-03 Schneider Electric Modicon Controllers (Update A) CISA ICS & IT advisories · Jul 8, 2025
- SEVD-2025-161-02 Modicon Controllers M241/M251/M258/LMC058/M262 Schneider Electric CPCERT · Jul 8, 2025