CNNVD-202508-2010 Information

CNNVD ID

CNNVD-202508-2010

CVE-2025-6625

  • CNNVD Published: 2025-08-18

Description (Chinese)

Schneider Electric Modicon M340是法国施耐德电气(Schneider Electric)公司的一款用于工业过程和基础设施的中程PLC(可编程逻辑控制器)。 Schneider Electric多款产品存在输入验证错误漏洞,该漏洞源于输入验证不当,可能导致拒绝服务。以下产品受到影响:Schneider Electric Modicon M340、Schneider Electric BMXNOR0200H、Schneider Electric BMXNGD0100和Schneider Electric BMXNOC0401。

Description (English)

Schneider Electric Modicon M340 is a medium-range PLC (programmable logic controller) for industrial processes and infrastructure from Schneider Electric, France. The Schneider Electric multiple product had an input validation error loophole, which stemmed from the inappropriate input certification and could lead to the denial of services. The following products were affected: Schneider Electric Modicon M340; Schneider Electric BMXNOR0200H; Schneider Electric BMXND0100; and Schneider Electric BMXNOC0401.

Hazard Level

Medium

Vulnerability Type

输入验证错误

Affected Vendor

施耐德电气。

Published

2025-08-18

Last Modified

2026-02-24

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-224-05.pdf https://nvd.nist.gov/vuln/detail/CVE-2025-6625

Patch

https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp

Share on: