Schneider Electric Modicon m262 Firmware vulnerabilities

2 CVEs affecting Schneider Electric Modicon m262 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13901, published 2026-03-10.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-13901, published 2026-03-10. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to…
• CVE-2024-6528, published 2024-07-11. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a vulnerability leading to a cross-site scripting condition where…