Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-18 | 1 | Active Exploitation1 |
| 2026-09-22 | 1 | Patch1 |
Crafted FTP command can force Schneider Electric Modicon M340 offline (CVE-2025-6625, CVSS 7.5 High). Restrict FTP, patch per CISA advisory. #ICSsecurity #OTsecurity #CVE https://cyberworldops.eu/en/crafted-ftp-command-can-knock-schneider-electric-modicon-m340-devices
Post summary
The post discloses a CVE causing offline impact via a crafted FTP command and explicitly advises restricting FTP and patching per a CISA advisory.
TRC analysis shows attackers exploiting CVE-2025-6625 in Schneider Electric Modicon M340 controllers through crafted FTP commands to cause denial of service against critical infrastructure. The vulnerability impacts energy, chemical, and water systems globally. Runtime segmentation helps contain operational technology network disruption. #CriticalInfrastructure #IndustrialSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/schneider-electric-modicon-m340-cve-2025-6625-ftp-dos-vulnerability-2025
Post summary
The threat research center reports that attackers are actively exploiting CVE‑2025‑6625 on Schneider Electric Modicon M340 controllers through crafted FTP commands, causing denial‑of‑service impacts on energy, chemical, and water systems worldwide. No patch or workaround is provided, though runtime segmentation is suggested as a mitigation.