{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2025-6625 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2025-6625 yet. Limit exposure of the affected software until one is available.","what":"CVE-2025-6625 is a high-severity denial of service vulnerability in Schneider ELectric BMXNGD0100: M580 Global Data module, published on 18 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2025-6625 and fix it if it is affected.\n\nWhat it is: CVE-2025-6625 is a high-severity denial of service vulnerability in Schneider ELectric BMXNGD0100: M580 Global Data module, published on 18 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2025-6625 in the wild and no public exploit code.\n\nAffected product: Schneider ELectric BMXNGD0100: M580 Global Data module. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2025-6625/ (Markdown: https://insights.sbomify.com/CVE-2025-6625/index.md)","id":"CVE-2025-6625","markdown":"https://insights.sbomify.com/CVE-2025-6625/index.md","name":"CVE-2025-6625","record":{"aliases":["GHSA-g42w-g594-fr77"],"analysis":{"component_type":"ics_ot","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"Modicon PLC modules","requires_auth":"none","summary":"A crafted FTP command can cause a denial of service on Schneider Electric Modicon communication modules, affecting industrial control systems.","user_interaction":"not_required","vuln_class":"denial_of_service"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"schneider","cpe":[],"cvss":{"score":8.7,"severity":"high","source":"cna","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"description":"CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific\ncrafted FTP command is sent to the device.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Denial of service in BMXNGD0100: M580 Global Data module","id":"CVE-2025-6625","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"denial_of_service","year":"2025"},"n_packages":0,"n_references":1,"next":{"headline":"Cross-site scripting in ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization","id":"CVE-2025-6626"},"packages":[],"prev":{"headline":"Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode","id":"CVE-2025-6624"},"products":["BMXNGD0100: M580 Global Data module","BMXNOC0401: Modicon M340 X80 Ethernet Communication modules","BMXNOE0100: Modbus/TCP Ethernet Modicon M340 module","BMXNOE0110: Modbus/TCP Ethernet Modicon M340 FactoryCast module","BMXNOR0200H: Ethernet / Serial RTU Module","Modicon M340"],"published":"2025-08-18","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2025-08-18","vendors":["Schneider ELectric","Schneider Electric"]},"summary":"A crafted FTP command can cause a denial of service on Schneider Electric Modicon communication modules, affecting industrial control systems.","url":"https://insights.sbomify.com/CVE-2025-6625/"}