CVE-2023-25620

published 2023-04-19

CVE-2023-25620: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious…

Priority P4 29 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that
could cause denial of service of the controller when a malicious project file is loaded onto the
controller by an authenticated user.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	modicon_m340_firmware	< 3.51	3.51
schneider-electric	modicon_m580_firmware	< 4.10	4.10
schneider_electric	legacy_modicon_premium_cpus	—	—
schneider_electric	legacy_modicon_quantum	—	—
schneider_electric	modicon_m340_cpu	—	—
schneider_electric	modicon_m580_cpu	—	—
schneider_electric	modicon_m580_cpu_safety	—	—
schneider_electric	modicon_mc80	—	—
schneider_electric	modicon_momentum_unity_m1e_processor	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-754