Modicon Controllers M258 / LMC058 vulnerabilities

2 known vulnerabilities in Modicon Controllers M258 / LMC058 from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Modicon Controllers M241 / M251: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2025-2875May 14, 2025Schneider Electric

  CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to access resources.

• 9.8 Critical severity

  CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service…

  CVE-2024-11737Dec 11, 2024Schneider Electric

  CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device.