CVE-2023-25620

Summary

CVE	CVE-2023-25620
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-04-19 09:15:00 UTC
Updated	2023-05-12 05:15:00 UTC
Description	A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.

Risk And Classification

Problem Types: CWE-754

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Schneider-electric	140cpu65	-	All	All	All
Operating System	Schneider-electric	140cpu65 Firmware	All	All	All	All
Hardware	Schneider-electric	Bmeh58s	-	All	All	All
Operating System	Schneider-electric	Bmeh58s Firmware	All	All	All	All
Hardware	Schneider-electric	Bmep58s	-	All	All	All
Operating System	Schneider-electric	Bmep58s Firmware	All	All	All	All
Hardware	Schneider-electric	Modicon M340	-	All	All	All
Operating System	Schneider-electric	Modicon M340 Firmware	All	All	All	All
Hardware	Schneider-electric	Modicon M580	-	All	All	All
Operating System	Schneider-electric	Modicon M580 Firmware	All	All	All	All
Hardware	Schneider-electric	Modicon Mc80	-	All	All	All
Operating System	Schneider-electric	Modicon Mc80 Firmware	All	All	All	All
Hardware	Schneider-electric	Modicon Momentum Unity M1e Processor	-	All	All	All
Operating System	Schneider-electric	Modicon Momentum Unity M1e Processor Firmware	All	All	All	All
Hardware	Schneider-electric	Tsxp57	-	All	All	All
Operating System	Schneider-electric	Tsxp57 Firmware	All	All	All	All

References

Reference	Source	Link	Tags
https/download.schneider-electric.com/files	MISC	https
download.schneider-electric.com/files	MISC	download.schneider-electric.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.