5.1
Medium
CVE-2025-3905 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
Description
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system variables that could cause an unvalidated data injected by authenticated malicious user leading to modify or read data in a victim’s browser.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modicon Controllers M241/M251 | Versions not published | |
| Modicon Controllers M258 / LMC058 | Versions not published |
Other CVEs of Modicon Controllers M241/M251
The 7 CVEs of Modicon Controllers M241/M251 →
CVE-2025-13902
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that…
5.1
Medium
CVE-2025-3117
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists…
5.1
Medium
CVE-2025-3116
CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated…
7.1
High
CVE-2025-3112
CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated…
7.1
High