Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that could cause denial of service when specific crafted requests are sent to the controller over HTTP.

Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that could cause denial of service when specific crafted requests are sent to the controller over HTTP.

Schneider Electric is aware of a vulnerability in its Modicon M241/M251 logic controllers. The Modicon M241 and M251 are Programmable Logic Controllers for performance-demanding applications. Failure to apply the remediations provided below may risk a buffer overflow attack, which could result in the unavailability of the controller.