CVE-2025-2875 | BDVDB-2026-278682 Detail
Schneider ElectricModicon Controllers M241 / M251
Description#
CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to access resources.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.