Skip to content
Sign in
8.7 High

CVE-2025-2875 CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of…

Description

CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to access resources.

Affected products and versions

Product Affected versions Fixed in
Modicon Controllers M241 / M251 Versions not published
Modicon Controllers M258 / LMC058 Versions not published

Other CVEs of Modicon Controllers M241 / M251

The 3 CVEs of Modicon Controllers M241 / M251 →
CVE-2024-11737 CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of… 9.3 Critical CVE-2024-6528 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that… 5.4 Medium
Track this CVE