CVE-2025-6625

🗓️ 18 Aug 2025 06:58:15Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 30 Views

CVE-2025-6625: CWE-20 input validation may cause DoS via crafted FTP command to device

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the microprogramming software of Schneider Electric’s programmable logic controller Modicon M340 and its network modules BMXNOE0100, BMXNOE0110, and BMXNOR0200H lies in insufficient validation of input data. This allows a intruder to trigger malfunctions in the device.	1 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-6625	18 Aug 202507:31	–	circl
CNNVD	Schneider Electric多款产品输入验证错误漏洞	18 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-6625	18 Aug 202506:58	–	cvelist
EUVD	EUVD-2025-28756	3 Oct 202520:07	–	euvd
ICS	Schneider Electric Modicon M340 Controller and Communication Modules (Update A)	12 Aug 202504:00	–	ics
NVD	CVE-2025-6625	18 Aug 202507:15	–	nvd
Positive Technologies	PT-2025-33644 · Ftp · Ftp	18 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6625	20 Aug 202507:38	–	redhatcve
Tenable Nessus	Schneider Electric Modicon M340 Controller and Communication Modules Improper Input Validation (CVE-2025-6625)	20 Nov 202500:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "Modicon M340",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "BMXNOR0200H: Ethernet / Serial RTU Module",
    "vendor": "Schneider ELectric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "BMXNGD0100: M580 Global Data module",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "BMXNOC0401: Modicon M340 X80 Ethernet Communication modules",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "BMXNOE0100: Modbus/TCP Ethernet Modicon M340 module",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 3.60"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "BMXNOE0110: Modbus/TCP Ethernet Modicon M340 FactoryCast module",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 6.80"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

17 Jun 2026 10:02Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

CVSS 48.7

EPSS0.00472

SSVC

CWE-20