8.7
Élevée
CVE-2025-2875 CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of…
Description
CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to access resources.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Modicon Controllers M241 / M251 | Versions non publiées | |
| Modicon Controllers M258 / LMC058 | Versions non publiées |