NetSight
medium6.5

CVE-2023-25620

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious proj…

Impact

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M580 Firmware
before 4.10
Schneider-ElectricModicon M340 Firmware
before 3.51
Schneider-ElectricModicon Momentum Unity M1e Processor Firmware
All versions
Schneider-ElectricModicon Mc80 Firmware
All versions
Schneider-Electric140cpu65 Firmware
All versions
Schneider-ElectricTsxp57 Firmware
All versions
Schneider-ElectricBmep58s Firmware
All versions
Schneider-ElectricBmeh58s Firmware
All versions

Weakness classification

References