Known vulnerabilities in Modicon M251

Known vulnerabilities in Modicon M251

Vendor: Schneider Electric

Software: Modicon M251

Software CPE: cpe:2.3:h:schneider_electric:modicon_m251:*:*:*:*:*:*:*:*

Website: https://www.schneider-electric.com/ww/en/

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU111938 - Resource exhaustion CVE-2025-3112	CWE-400	Medium	No	No	5.3.12.51	25.06.2025	SB2025062523
#VU111937 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-3899	CWE-79	Low	No	No	5.3.12.51	25.06.2025	SB2025062523
#VU111936 - Improper input validation CVE-2025-3116	CWE-20	Medium	No	No	5.3.12.51	25.06.2025	SB2025062523
#VU111935 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-3905	CWE-79	Low	No	No	5.3.12.51	25.06.2025	SB2025062523
#VU111929 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-3117	CWE-79	Low	No	No	5.3.12.51	25.06.2025	SB2025062523
#VU111925 - Improper input validation CVE-2025-3898	CWE-20	Medium	No	No	5.3.12.51	25.06.2025	SB2025062523
#VU109832 - Externally Controlled Reference to a Resource in Another Sphere CVE-2025-2875	CWE-610	High	No	No	5.3.12.48	27.05.2025	SB2025052713
#VU102542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-6528	CWE-79	Low	No	No	5.2.11.24	13.01.2025	SB2025011304
#VU102449 - Improper input validation CVE-2024-11737	CWE-20	High	No	No	-	08.01.2025	SB2025010840
#VU27383 - Insufficient Verification of Data Authenticity CVE-2020-7487	CWE-345	Low	No	No	-	28.04.2020	SB2020042815
#VU27382 - Cleartext Transmission of Sensitive Information CVE-2020-7488	CWE-319	Low	No	No	-	28.04.2020	SB2020042815