CVE-2026-3869 — Schneider Electric / Modicon M580

CVE-2026-3869

Schneider Electric / Modicon M580 PUBLISHED

Description (CNA)

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Modicon M580	affected All versions with an application level below 4.00
Schneider Electric / Modicon M580 Safety	affected All versions with an application level below 4.20

CWE

CWE-303

References

https://download.se.com/files?p_Doc_Ref=SEVD-2026-251-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-04.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.