Summary
Schneider Electric is aware of a vulnerability in its Modicon M580 and Modicon M580 Safety controllers.
The Modicon M580 is an Ethernet-based Programmable Automation Controller (ePAC) designed for industrial digital transformation.
Failure to apply the remediations provided below may risk establishing an unauthenticated connection to Modicon M580 or M580 Safety controllers which could result in loss of confidentiality, integrity and availability of the PLC.
Vulnerabilities 1
-
Critical 9.2
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidenti…
Revision history
-
#1.0.0
Original Release
References
-
Incorrect Implementation of Authentication Algorithm vulnerability on Modicon M580 and Modicon M580 Safety - SEVD-2026-251-04 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-251-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-04.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390/