CVE-2025-13901mediumCWE-404

CVE-2025-13901: medium-severity vulnerability in Schneider Electric Modicon M241/M251

Published

Follow this CVE+ Monitor Modicon M241/M251+ Monitor Modicon M262

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.5%
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected products
Schneider Electric · Modicon M241/M251Schneider Electric · Modicon M262