CVE-2024-6528: Schneider Electric Modicon LMC058 Firmware

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload.

Affected products

• Schneider Electric Modicon LMC058 Firmware: any version
• Schneider Electric Modicon m241 Firmware: any version
• Schneider Electric Modicon m251 Firmware: any version
• Schneider Electric Modicon m258 Firmware: any version
• Schneider Electric Modicon m262 Firmware: any version

Published 2024-07-11. Last modified 2026-06-17.