CVE-2023-25619
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
- Record
CVE-2023-25619- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-754, CWE-754
- Updated
- 2026-11-02
EUVDEUVD-2023-29559
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
- Record
EUVD-2023-29559- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j5wq-fj8p-rh45
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
- Record
GHSA-j5wq-fj8p-rh45- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-754
- Updated
- 2026-11-02
NVD
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol.
- Record
CVE-2023-25619- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-754
- Updated
- 2026-11-02
Affected products
- schneider electric legacy modicon premium cpus (tsxp57*)
- schneider electric legacy modicon quantum (140cpu65*)
- schneider electric modicon m340 cpu (part numbers bmxp34*)
- schneider electric modicon m580 cpu (part numbers bmep* and bmeh*)
- schneider electric modicon m580 cpu safety (part numbers bmep58*s and bmeh58*s)
- schneider electric modicon mc80 (bmkc80)
- schneider electric modicon momentum unity m1e processor (171cbu*)
- schneider-electric bmeh58s firmware
- schneider-electric bmep58s firmware
- schneider-electric modicon m340 firmware
- schneider-electric modicon m580 firmware
- schneider-electric modicon mc80 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-25619 is a high vulnerability (CVSS 7.5) in Schneider Electric Legacy Modicon Premium Cpus (tsxp57*), published April 19, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.62%, the 50th percentile. No source names a fixed version.
References
download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf
nvd.nist.gov/vuln/detail/CVE-2023-25619
https//download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf
github.com/advisories/GHSA-j5wq-fj8p-rh45