CVE-2025-3112: Schneider Electric Modicon Controllers m241/m251

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user sends manipulated HTTPS Content-Length header to the webserver.

Affected products

• Schneider Electric Modicon Controllers m241/m251: before 5.3.12.51 (fixed in 5.3.12.51)

Published 2025-06-10. Last modified 2026-06-17.