CVE-2023-25619: Schneider Electric BMEH58S Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.

Affected products

• Schneider Electric BMEH58S Firmware: any version
• Schneider Electric BMEP58S Firmware: any version
• Schneider Electric Modicon m340 Firmware: before 3.51 (fixed in 3.51)
• Schneider Electric Modicon m580 Firmware: before 4.10 (fixed in 4.10)
• Schneider Electric Modicon MC80 Firmware: any version
• Schneider Electric Modicon Momentum Unity m1e Processor Firmware: any version
• Schneider Electric TSXP57 Firmware: any version

Published 2023-04-19. Last modified 2026-06-17.