CVE-2023-25620 Denial of service in Legacy Modicon Premium CPUs (TSXP57*)

Medium 6.5 Published 19 Apr 2023 Updated 5 Feb 2025

An authenticated user can cause denial of service on Schneider Modicon PLCs by loading a malicious project file.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-25620?

CVE-2023-25620 is a medium-severity denial of service vulnerability in Schneider Electric Legacy Modicon Premium CPUs (TSXP57*), published on 19 Apr 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious project file is loaded onto the controller by an authenticated user.

Weakness: CWE-754

Which versions are affected by CVE-2023-25620?

It affects 8 products.

Products include Schneider-Electric 140cpu65 Firmware, Schneider-Electric Bmeh58s Firmware, Schneider-Electric Bmep58s Firmware, Schneider-Electric Modicon M340 Firmware, Schneider-Electric Modicon M580 Firmware, Schneider-Electric Modicon Mc80 Firmware and 2 more.

How do I fix CVE-2023-25620?

No fix has been published for CVE-2023-25620 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2023-25620 being exploited?

There is no known exploitation of CVE-2023-25620 in the wild and no public exploit code.

CVE-2020-7534 Cross-site request forgery in Modicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum CPUs with integrated Ethernet (Copro): 140CPU65 (All Versions), Modicon Premium CPUs with integrated Ethernet (Copro): TSXP57 (All Versions), Modicon M340 ethernet modules: (BMXNOC0401, BMXNOE01, BMXNOR0200H) (All Versions), Modicon Quantum and Premium factory cast communication modules: (140NOE77111, 140NOC78*00, TSXETY5103, TSXETY4103) High 7.1

Sources

Also known as GHSA-jp8p-mv2j-qxc2.