CVE-2023-25620
published 2023-04-19CVE-2023-25620: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious…
medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that
could cause denial of service of the controller when a malicious project file is loaded onto the
controller by an authenticated user.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| schneider-electric | modicon_m340_firmware | < 3.51 | 3.51 |
| schneider-electric | modicon_m580_firmware | < 4.10 | 4.10 |
| schneider_electric | legacy_modicon_premium_cpus | — | — |
| schneider_electric | legacy_modicon_quantum | — | — |
| schneider_electric | modicon_m340_cpu | — | — |
| schneider_electric | modicon_m580_cpu | — | — |
| schneider_electric | modicon_m580_cpu_safety | — | — |
| schneider_electric | modicon_mc80 | — | — |
| schneider_electric | modicon_momentum_unity_m1e_processor | — | — |