Vulnerabilities > Schneider Electric > Modicon M241 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2021-05-26 CVE-2021-22699 Improper Input Validation vulnerability in Schneider-Electric Modicon M241 Firmware and Modicon M251 Firmware
Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that could cause denial of service when specific crafted requests are sent to the controller over HTTP.
network
low complexity
schneider-electric CWE-20
7.8
2020-04-22 CVE-2020-7487 Insufficient Verification of Data Authenticity vulnerability in Schneider-Electric products
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
network
low complexity
schneider-electric CWE-345
7.5