CVE-2025-3116

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special malformed HTTPS request containing improper formatted body data to the controller.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Schneider Electric	Modicon Controllers M241/M251	Versions prior to 5.3.12.51
Schneider Electric	Modicon Controllers M258 / LMC058	All Versions

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-161-02.pdf

Timeline

Published: Jun 10, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-311602.9atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecif CVE-2025-311619.8CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy insta CVE-2025-311626.6Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function CVE-2025-311636.6Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.CVE-2025-311646.6heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via create_line_with_spli CVE-2025-311656.9Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute Ja CVE-2025-31175.4CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration fi CVE-2025-311709.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity CVE-2025-311715.5File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect CVE-2025-311725.5Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect ser CVE-2025-311736.5Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect ser CVE-2025-311747.5Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.