CVE-2023-25620

CWE-7543 documents3 sources

Severity

6.5MEDIUM

EPSS

0.1%

top 75.88%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schneider-electric Modicon M340 Firmware Schneider-electric Modicon M580 Firmware Schneider Electric Legacy Modicon Premium Cpus (tsxp57*)+6 more

Timeline

PublishedApr 19

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages9 packages

▶NVDschneider-electric/modicon_m340_firmware< 3.51

▶NVDschneider-electric/modicon_m580_firmware< 4.10

▶CVEListV5schneider_electric/modicon_mc80_(bmkc80)All

▶CVEListV5schneider_electric/legacy_modicon_quantum_(140cpu65*)All

▶CVEListV5schneider_electric/legacy_modicon_premium_cpus_(tsxp57*)All

🔴Vulnerability Details

CVEList

CVE-2023-25620: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malic↗2023-04-19

▶

GHSA

GHSA-jp8p-mv2j-qxc2: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malic↗2023-04-19

▶