PT-2025-24628 · Schneider Electric · Modicon Controllers M241/M251+1

Published 2025-06-10 · Updated 2025-06-10 · CVE-2025-3898

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description A Denial of Service issue exists due to improper input validation. This occurs when an authenticated malicious user sends an HTTPS request containing an invalid data type to the web server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-3898

Affected Products

Modicon Controllers M241/M251

Modicon Controllers M262

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-3898 · Security Note
• https://twitter.com/CVEnew/status/1932359548473426061 · Twitter Post
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-161-02.pdf · Note
• https://t.me/cvetracker/25882 · Telegram Post