CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 14:22.
Filters
1 active1 advisories found
SEVD-2026-251-04
Incorrect Implementation of Authentication Algorithm vulnerability on Modicon M580 and Modicon M580 Safety
Risk evaluation
Schneider Electric is aware of a vulnerability in its Modicon M580 and Modicon M580 Safety controllers. The Modicon M580 is an Ethernet-based Programmable Automation Controller (ePAC) designed for industrial digital transformation. Failure to apply the remediations provided below may risk establishing an unauthenticated connection to Modicon M580 or M580 Safety controllers which could result in loss of confidentiality, integrity and availability of the PLC.
Mitigation summary
Ensure to use firmware version 4.10 or above AND Update your application project to application level 4.00 or above. Application level 4.00 is available in EcoStruxure Control Expert V15.2 or later versions.
Revision history (1)
Initial publication — 8 September 2026
Original Release