Modicon Controllers M241 / M251
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider_electric:modicon_controllers_m241_/_m251:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5) |
|---|---|
| Product | Modicon Controllers M241 / M251 (4e8bb508-40cc-5db4-a7e3-116bee80d825) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2875 |
vulnerable | 2026-06-08 07:16:58.541763 |
Details available
HIGH (7.5)
CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could
cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to
access resources.
Published: 2025-05-14T08:46:19.416Z
Updated: 2025-05-14T13:38:32.786Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6528 |
vulnerable | 2026-06-08 06:58:19.694986 |
Details available
MEDIUM (5.4)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site scripting
condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a
page containing the injected payload.
Published: 2024-07-11T09:03:27.074Z
Updated: 2024-08-01T21:41:03.525Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11737 |
vulnerable | 2026-06-08 06:23:50.306037 |
Details available
CRITICAL (9.8)
CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of
confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device.
Published: 2024-12-11T09:36:29.282Z
Updated: 2024-12-11T15:22:05.910Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.