CVE-2023-25619
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cybersecurity@se.com
- Published
- 2023-04-19
- Last modified
- 2025-02-05
- Weaknesses
- CWE-754
Affected products
- Bmeh58s Firmware (Schneider-electric)
- Bmep58s Firmware (Schneider-electric)
- Modicon M340 Firmware (Schneider-electric)
- Modicon M580 Firmware (Schneider-electric)
- Modicon Mc80 Firmware (Schneider-electric)
- Modicon Momentum Unity M1e Processor Firmware (Schneider-electric)
- Tsxp57 Firmware (Schneider-electric)
- Legacy Modicon Premium Cpus Tsxp57 (Schneider Electric)
- Legacy Modicon Quantum 140cpu65 (Schneider Electric)
- Modicon M340 Cpu Part Numbers Bmxp34 (Schneider Electric)
- Modicon M580 Cpu Part Numbers Bmep And Bmeh (Schneider Electric)
- Modicon M580 Cpu Safety Part Numbers Bmep58s And Bmeh58s (Schneider Electric)
- Modicon Mc80 Bmkc80 (Schneider Electric)
- Modicon Momentum Unity M1e Processor 171cbu (Schneider Electric)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_…
