Modicon Controllers M241m251 (Schneider Electric) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-03-10. Vendor: Schneider Electric.
CVEs of Modicon Controllers M241m251
- CVE-2025-13902 - CVSS 5.4 (medium), 2026-03-10: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where…
- CVE-2025-3898 - CVSS 7.1 (high), 2025-06-10: CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing…
- CVE-2025-3905 - CVSS 5.4 (medium), 2025-06-10: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system variables that could…
- CVE-2025-3899 - CVSS 5.4 (medium), 2025-06-10: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Certificates page on Webserver that could…
- CVE-2025-3117 - CVSS 5.4 (medium), 2025-06-10: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration file paths that…
- CVE-2025-3116 - CVSS 7.1 (high), 2025-06-10: CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special malformed HTTPS…
- CVE-2025-3112 - CVSS 7.1 (high), 2025-06-10: CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user sends manipulated…
