CVE-2025-13901
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attack…
Published Mar 10, 2026 · updated Jun 23, 2026 · schneider-electric modicon m241 firmware
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 10, 2026 · NIST NVD
Detected
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.
Jun 23, 2026 · NIST NVD
Updated
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.
Affected
- cpe schneider-electric/modicon m241 firmwareversion unspecified
- cpe schneider-electric/modicon m251 firmwareversion unspecified
- cpe schneider-electric/modicon m262 firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2025-13901
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-13901
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.
nvd.nist.gov