← Database

CVE-2025-13901

MEDIUM CVSS: 5.3 Published: 2026-03-10 Modified: 2026-06-23

Description

CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.

Affected Platforms

Schneider-Electric Modicon M241 FirmwareSchneider-Electric Modicon M251Schneider-Electric Modicon M262Schneider-Electric Modicon M251 FirmwareSchneider-Electric Modicon M241Schneider-Electric Modicon M262 Firmware

Weakness Type

CWE-404

References