Skip to content
Sign in
6.5 Medium

CVE-2023-25620 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of…

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.

Affected products and versions

Product Affected versions Fixed in
Modicon M340 CPU (part numbers BMXP34*) Versions not published
Modicon M580 CPU (part numbers BMEP* and BMEH*) Versions not published
Modicon M580 CPU Safety (part numbers BMEP58*S and BMEH58*S) Versions not published
Modicon Momentum Unity M1E Processor (171CBU*) Versions not published
Modicon MC80 (BMKC80) Versions not published
Legacy Modicon Quantum (140CPU65*) Versions not published
Legacy Modicon Premium CPUs (TSXP57*) Versions not published

Other CVEs of Modicon M340 CPU (part numbers BMXP34*)

The 12 CVEs of Modicon M340 CPU (part numbers BMXP34*) →
CVE-2024-8936 CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory… 8.3 High CVE-2024-8938 CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a… 9.2 Critical CVE-2024-8937 CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a… 8.3 High CVE-2024-8935 CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of… 7.7 High
Track this CVE