VYPR
← All advisories
High severity7.5NVD Advisory· Published May 26, 2021· Updated Jun 17, 2026

CVE-2021-22699

CVE-2021-22699

Description

Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that could cause denial of service when specific crafted requests are sent to the controller over HTTP.

Affected products

3
  • Schneider Electric/Modicon M241
    cpe:2.3:o:schneider-electric:modicon_m241_firmware:*:*:*:*:*:*:*:*
    Range: <5.1.9.1
  • Schneider Electric/Modicon M2512 versions
    cpe:2.3:o:schneider-electric:modicon_m251_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:schneider-electric:modicon_m251_firmware:*:*:*:*:*:*:*:*range: <5.1.9.1
    • (no CPE)range: <V5.1.9.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.