CVEvulnerability

CVE-2025-13901

6.9 MEDIUM Published 2026-03-10 Modified 2026-06-23 Official page ↗
Status
Analyzed
Published
2026-03-10
Last modified
2026-06-23
Assigner
[email protected]
CVSS 4.0 ([email protected])
6.9 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-404

Description

CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.

Affected configurations

• schneider-electric modicon m241 firmware (< 5.4.13.12) • schneider-electric modicon m251 firmware (< 5.4.13.12) • schneider-electric modicon m262 firmware (< 5.4.10.12)

Related

Weakness · CWE (1)

  • CWE-404 Improper Resource Shutdown or Release weakness

References