8.7
High
CVE-2025-6625 CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP…
Description
CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Modicon M340 | Versions not published | |
| BMXNOR0200H: Ethernet / Serial RTU Module | Versions not published | |
| BMXNGD0100: M580 Global Data module | Versions not published | |
| BMXNOC0401: Modicon M340 X80 Ethernet Communication modules | Versions not published | |
| BMXNOE0100: Modbus/TCP Ethernet Modicon M340 module | Versions not published | |
| BMXNOE0110: Modbus/TCP Ethernet Modicon M340 FactoryCast module | Versions not published |