Schneider Electric Modicon M251 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Schneider Electric Modicon M251 Firmware: 2 record(s), with affected versions and fixes.cpe:2.3:o:schneider-electric:modicon_m251_firmware
CVE-2025-13902
Medium · 5.4
CWE-79 Mar 10, 2026
Cross-site Scripting (XSS) in Schneider Electric Modicon M258 Firmware
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition where authenticated attackers can have a victim’s browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server containing the injected payload.
CVE-2025-13901
Medium · 5.3
CWE-404 Mar 10, 2026
Improper Resource Shutdown or Release in Schneider Electric Modicon M241 Firmware
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.