CVE-2025-6625

High7.5Published on August 18, 2025

CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device.

CVSS score7.5 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness type (CWE)CWE-20

Vulnerabilities

Crafted FTP Command Can Knock Schneider Electric Modicon M340 Devices Offline

CVE-2025-6625 lets unauthenticated attackers knock Schneider Modicon M340 controllers offline via crafted FTP commands. Learn affected models and fixes.

Sep 22, 202603:376 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Crafted FTP Command Can Knock Schneider Electric Modicon M340 Devices Offline