Advisories · Technology

Schneider Electric Modicon Controllers M241/M251.

Every CVE that names Schneider Electric Modicon Controllers M241/M251 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-13902 CVE record

CVSS 5.1 Medium

Cross-site scripting in Schneider Electric Modicon Controllers M241/M251 and others
- Schneider Electric Modicon Controllers M241/M251
- Schneider Electric Modicon Controllers M258/LMC058
- Cross-site scripting (XSS)
Not analysed yet 10 Mar 2026
CVE-2025-3117 CVE record

CVSS 5.1 Medium

Cross-site scripting in Schneider Electric Modicon Controllers M241/M251 and others
- Schneider Electric Modicon Controllers M241/M251
- Schneider Electric Modicon Controllers M262
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-3116 CVE record

CVSS 7.1 High

Improper input validation in Schneider Electric Modicon Controllers M241/M251 and others
- Schneider Electric Modicon Controllers M241/M251
- Schneider Electric Modicon Controllers M258 / LMC058
- CWE-20
Not analysed yet 10 Jun 2025
CVE-2025-3905 CVE record

CVSS 5.1 Medium

Cross-site scripting in Schneider Electric Modicon Controllers M241/M251 and others
- Schneider Electric Modicon Controllers M241/M251
- Schneider Electric Modicon Controllers M258 / LMC058
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-3112 CVE record

CVSS 7.1 High

Uncontrolled resource consumption in Schneider Electric Modicon Controllers M241/M251
- Schneider Electric Modicon Controllers M241/M251
- Denial of service
Not analysed yet 10 Jun 2025
CVE-2025-3899 CVE record

CVSS 5.1 Medium

Cross-site scripting in Schneider Electric Modicon Controllers M241/M251
- Schneider Electric Modicon Controllers M241/M251
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2025
CVE-2025-3898 CVE record

CVSS 7.1 High

Improper input validation in Schneider Electric Modicon Controllers M241/M251 and others
- Schneider Electric Modicon Controllers M241/M251
- Schneider Electric Modicon Controllers M262
- CWE-20
Not analysed yet 10 Jun 2025
CVE-2025-2875 CVE record

CVSS 8.7 High

CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webs…
- Schneider Electric Modicon Controllers M241 / M251
- Schneider Electric Modicon Controllers M258 / LMC058
- CWE-610
Not analysed yet 14 May 2025
CVE-2024-11737 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper input validation in Schneider Electric Modicon Controllers M241 / M251 and others
- Schneider Electric Modicon Controllers M241 / M251
- Schneider Electric Modicon Controllers M258 / LMC058
- CWE-20
Not analysed yet 11 Dec 2024
CVE-2024-6528 CVE record

CVSS 5.4 Medium

Cross-site scripting in Schneider Electric Modicon Controllers M241 / M251 and others
- Schneider Electric Modicon Controllers M241 / M251
- Schneider Electric Modicon Controllers M258 / LMC058
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2024