Product by Schneider Electric

Schneider Electric Modicon M241 Firmware

10 known vulnerabilities in Schneider Electric Modicon M241 Firmware (Schneider Electric), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Schneider Electric Modicon M241 Firmware (Schneider Electric)

Critical	CVE-2017-6026	Schneider Electric Modicon PLCs: Use of Insufficiently Random Values also in 1 other product	9.1	30.06.2017
Critical	CVE-2017-6028	Schneider Electric Modicon PLCs: Insufficiently Protected Credentials also in 1 other product	9.8	30.06.2017
Medium	CVE-2017-6030	Schneider Electric Modicon PLCs Predictable Value Range from Previous Values also in 2 other products	6.5	30.06.2017
High	CVE-2019-6820	Schneider-electric Atv Imc Drive Controller Firmware: Missing Authentication for Critical Function also in 4 other products	8.2	22.05.2019
Critical	CVE-2020-7487	Schneider Electric Ecostruxure Machine Expert: Insufficient Verification of Data Authenticity also in 6 other products	9.8	22.04.2020
High	CVE-2021-22699	Schneider Electric Modicon M241 Firmware: Improper Input Validation also in 1 other product	7.5	26.05.2021
High	CVE-2020-7488	Schneider Electric Ecostruxure Machine Expert: Cleartext Transmission of Sensitive Information also in 6 other products	7.5	22.04.2020
Medium	CVE-2025-13901	Schneider Electric Modicon M241/M251: Improper Resource Shutdown or Release also in 1 other product	5.3	10.03.2026
Medium	CVE-2025-13902	Schneider Electric Modicon Controllers M241/M251: Cross-site Scripting also in 5 other products	5.4	10.03.2026
Medium	CVE-2024-6528	Schneider Electric Modicon Controllers M241 / M251: Cross-site Scripting also in 10 other products	5.4	11.07.2024