Vulnerability spotlight: Multiple vulnerabilities in Schneider Electric Modicon M580

Summary: Cisco Talos disclosed multiple vulnerabilities in the Schneider Electric Modicon M580 programmable automation controller, firmware version SV2.80, most of which can cause a denial of service. The majority sit in the device's FTP functionality, and several can be triggered using default credentials, while two information disclosure bugs (CVE-2019-6846 in FTP and CVE-2019-6845 in UMAS) are exploited by sniffing network traffic.
What you should know: Seven of these flaws let an attacker using default credentials push the controller into a fault state and stop normal execution, and the outdated-firmware case (CVE-2019-6847) causes a non-recoverable fault that halts remote communications entirely, with only a mitigation and no explicit patch.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2019-6841 CVE-2019-6842 CVE-2019-6843 CVE-2019-6844 CVE-2019-6845 CVE-2019-6846
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026