7.1
High
CVE-2025-3898 CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated…
Description
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing invalid data type to the webserver.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modicon Controllers M241/M251 | Versions not published | |
| Modicon Controllers M262 | Versions not published |
Other CVEs of Modicon Controllers M241/M251
The 7 CVEs of Modicon Controllers M241/M251 →
CVE-2025-13902
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…
5.1
Medium
CVE-2025-3117
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
5.1
Medium
CVE-2025-3116
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated…
7.1
High
CVE-2025-3905
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
5.1
Medium