Known vulnerabilities in Modicon M258

Vendor: Schneider Electric
Software: Modicon M258
Software CPE: cpe:2.3:h:schneider_electric:modicon_m258:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Modicon M258 Modicon M258 is affected by 8 known vulnerabilities: 2 high, 1 medium, 5 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111936 - Improper input validation
CVE-2025-3116		 CWE-20 Medium
No
No
 - 25.06.2025 SB2025062523
#VU111935 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-3905		 CWE-79 Low
No
No
 - 25.06.2025 SB2025062523
#VU111929 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-3117		 CWE-79 Low
No
No
 - 25.06.2025 SB2025062523
#VU109832 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2025-2875		 CWE-610 High
No
No
 - 27.05.2025 SB2025052713
#VU102542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6528		 CWE-79 Low
No
No
 - 13.01.2025 SB2025011304
#VU102449 - Improper input validation
CVE-2024-11737		 CWE-20 High
No
No
 - 08.01.2025 SB2025010840
#VU27383 - Insufficient Verification of Data Authenticity
CVE-2020-7487		 CWE-345 Low
No
No
 - 28.04.2020 SB2020042815
#VU27382 - Cleartext Transmission of Sensitive Information
CVE-2020-7488		 CWE-319 Low
No
No
 - 28.04.2020 SB2020042815