PT-2026-24255 · Schneider Electric · Modicon Controllers M241/M251+7
CVE-2025-13902
·
Publicado
2026-03-10
·
Atualizado
2026-06-23
CVSS v2.0
5.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
(affected versions not specified)
Description
An issue exists that allows authenticated attackers to execute arbitrary JavaScript code in a victim's browser when the victim hovers over a specially crafted element on a web server containing the injected payload. This is due to improper neutralization of input during web page generation, also known as Cross-site Scripting.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Modicon Controllers M241/M251
Modicon Controllers M258 / Lmc058
Modicon M241
Modicon M251
Modicon Lmc058 Firmware
Modicon M241 Firmware
Modicon M251 Firmware
Modicon M258 Firmware