CVE-2025-13901
CWE-404Published: March 10, 2026· Updated: Mar 11, 2026
Official Description
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels.
Technical Analysis
CVE-2025-13901 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.
The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.
CVSS v3.1 Vector Breakdown
Exploit & PoC Resources
News & Research Mentioning CVE-2025-13901
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the product. The following versions of Schneider Electric Modicon M241, M251, and M262 are affected: Modicon M241 versions prior to 5.4.13.12 Modicon_Controller_M241 Modicon M251 versions prior to 5.4.13.12 Modicon_Controller_M251 Modicon M262 versions prior to 5.4.10.12 Modicon_Controller_M262 CVSS Vendor Equipment Vulnerabilities v3 5.3 Schneider Electric Schneider Electric Modicon M241, M251, and M262 Improper Resource Shutdown or Release Background Critical Infrastructure Sectors: Commercial Facilities, Critical Manufacturing, Energy Countries/Areas Deployed: Worldwide Company Headquarters Location: France Vulnerabilit [xlite_meta score:79 src:CISA Alerts xlite_fp:838957cbf432c5af0db0684ef27b224944f004f2b8560e3e5ef1b4fbb85c52b5]
All References (1)
Quick Facts
Known Threat Actors
Related CVEs (CWE-404)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2025-13901 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts