Modicon Controllers M241/M251
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider_electric:modicon_controllers_m241/m251:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5) |
|---|---|
| Product | Modicon Controllers M241/M251 (2e1e0107-09fa-5608-a074-296efe8f7ac4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3905 |
vulnerable | 2026-06-08 07:23:10.120766 |
Details available
MEDIUM (5.4)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability
exists impacting PLC system variables that could cause an unvalidated data injected by authenticated
malicious user leading to modify or read data in a victim’s browser.
Published: 2025-06-10T08:32:09.065Z
Updated: 2025-06-10T14:23:25.411Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3899 |
vulnerable | 2026-06-08 07:23:10.110981 |
Details available
MEDIUM (5.4)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability
exists in Certificates page on Webserver that could cause an unvalidated data injected by authenticated
malicious user leading to modify or read data in a victim’s browser.
Published: 2025-06-10T08:25:39.254Z
Updated: 2025-06-10T14:33:59.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3898 |
vulnerable | 2026-06-08 07:23:10.110510 |
Details available
MEDIUM (6.5)
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an
authenticated malicious user sends HTTPS request containing invalid data type to the webserver.
Published: 2025-06-10T08:22:02.228Z
Updated: 2025-06-10T14:35:45.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3117 |
vulnerable | 2026-06-08 07:23:08.169386 |
Details available
MEDIUM (5.4)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability
exists impacting configuration file paths that could cause an unvalidated data injected by authenticated
malicious user leading to modify or read data in a victim’s browser.
Published: 2025-06-10T08:43:15.540Z
Updated: 2025-06-10T14:19:52.530Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3116 |
vulnerable | 2026-06-08 07:23:08.167763 |
Details available
MEDIUM (6.5)
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an
authenticated malicious user sends special malformed HTTPS request containing improper formatted body
data to the controller.
Published: 2025-06-10T08:34:50.585Z
Updated: 2025-06-10T14:21:34.597Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3112 |
vulnerable | 2026-06-08 07:23:08.127761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13902 |
vulnerable | 2026-06-08 07:06:32.935173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.