Modicon Controllers M258 / Lmc058
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider_electric:modicon_controllers_m258_/_lmc058:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5) |
|---|---|
| Product | Modicon Controllers M258 / Lmc058 (9577c456-3a8f-571d-a37e-be425eb6b157) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3905 |
vulnerable | 2026-06-08 07:23:10.120928 |
Details available
MEDIUM (5.4)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability
exists impacting PLC system variables that could cause an unvalidated data injected by authenticated
malicious user leading to modify or read data in a victim’s browser.
Published: 2025-06-10T08:32:09.065Z
Updated: 2025-06-10T14:23:25.411Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3116 |
vulnerable | 2026-06-08 07:23:08.168869 |
Details available
MEDIUM (6.5)
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an
authenticated malicious user sends special malformed HTTPS request containing improper formatted body
data to the controller.
Published: 2025-06-10T08:34:50.585Z
Updated: 2025-06-10T14:21:34.597Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2875 |
vulnerable | 2026-06-08 07:16:58.542814 |
Details available
HIGH (7.5)
CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could
cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to
access resources.
Published: 2025-05-14T08:46:19.416Z
Updated: 2025-05-14T13:38:32.786Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6528 |
vulnerable | 2026-06-08 06:58:19.695777 |
Details available
MEDIUM (5.4)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site scripting
condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a
page containing the injected payload.
Published: 2024-07-11T09:03:27.074Z
Updated: 2024-08-01T21:41:03.525Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11737 |
vulnerable | 2026-06-08 06:23:50.307210 |
Details available
CRITICAL (9.8)
CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of
confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device.
Published: 2024-12-11T09:36:29.282Z
Updated: 2024-12-11T15:22:05.910Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.