Description
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Modicon M580 | All versions with an application level below 4.00 | — |
| Schneider Electric | Modicon M580 Safety | All versions with an application level below 4.20 | — |
Advisories 1
- SEVD-2026-251-04 Incorrect Implementation of Authentication Algorithm vulnerability on Modicon M580 and Modicon M580 Safety Schneider Electric CPCERT · Sep 8, 2026