CVE-2023-25619

CWE-7543 documents3 sources

Severity

7.5HIGH

EPSS

0.1%

top 74.28%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schneider-electric Modicon M340 Firmware Schneider-electric Modicon M580 Firmware Schneider Electric Legacy Modicon Premium Cpus (tsxp57*)+6 more

Timeline

PublishedApr 19

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages9 packages

▶NVDschneider-electric/modicon_m340_firmware< 3.51

▶NVDschneider-electric/modicon_m580_firmware< 4.10

▶CVEListV5schneider_electric/modicon_mc80_(bmkc80)All

▶CVEListV5schneider_electric/legacy_modicon_quantum_(140cpu65*)All

▶CVEListV5schneider_electric/legacy_modicon_premium_cpus_(tsxp57*)All

🔴Vulnerability Details

CVEList

CVE-2023-25619: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communi↗2023-04-19

▶

GHSA

GHSA-j5wq-fj8p-rh45: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communi↗2023-04-19

▶