MC
Product
Modicon Controllers M241/M251
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 7Low 0
Watch
Add Modicon Controllers M241/M251 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2875 | 7.5 | May 14 | CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker… Affected: Versions prior to v5.3.12.48 |
| CVE-2025-3116 | 6.5 | Jun 10 | CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special malformed HTTPS request containing… Affected: Versions prior to 5.3.12.51 |
| CVE-2025-3112 | 6.5 | Jun 10 | CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user sends manipulated HTTPS Content-Length… Affected: Versions prior to 5.3.12.51 |
| CVE-2025-3898 | 6.5 | Jun 10 | CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing invalid data type to… Affected: Versions prior to 5.3.12.51 |
| CVE-2025-13902 | 5.4 | Mar 10 | CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attackers can have… Affected: Versions prior to 5.4.13.12 |
| CVE-2025-3117 | 5.4 | Jun 10 | CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration file paths that could cause an… Affected: Versions prior to 5.3.12.51 |
| CVE-2025-3905 | 5.4 | Jun 10 | CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system variables that could cause an unvalidated… Affected: Versions prior to 5.3.12.51 |
| CVE-2025-3899 | 5.4 | Jun 10 | CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Certificates page on Webserver that could cause an unvalidated… Affected: Versions prior to 5.3.12.51 |
Showing 8