Schneider Electric Modicon M340 Controller and Communication Modules
CISA warns CVE-2025-6625 lets unauthenticated attackers crash Schneider Electric Modicon M340 controllers and communication modules via a crafted FTP command.
Schneider Electric advisory SEVD-2025-224-05, republished by CISA, describes CVE-2025-6625 (CWE-20 improper input validation) in Modicon M340 controllers and X80 Ethernet, M580 Global Data, and Modbus/TCP modules. A crafted FTP command sent to an affected device causes denial of service, with CVSS v3.1 base score 7.5. Fixes are available, including firmware SV3.70 for the Modicon M340 controller.
- CVE-2025-6625 is improper input validation (CWE-20) scored 7.5 (CVSS v3.1)
- Crafted FTP commands cause denial of service on affected controllers and modules
- Affects M340 firmware before SV3.70, M580 Global Data, and Modbus/TCP modules
- Fixes available per Schneider Electric advisory SEVD-2025-224-05
- CVEs
- CVE-2025-6625
- Vendors
- Schneider ElectricCISA
- Organizations
- Schneider ElectricCISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-6625 | CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device | 8.7 | <1% |
From the original article
6 min read at cisa.govView CSAF Summary Schneider Electric is aware of a vulnerability in its Modicon M340 https://www. se. com/ww/en/product-range/1468-modicon-m340-pac/, BMXNOR0200H https://www.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.