Schneider Electric Modicon M580

Name: Schneider Electric Modicon M580
Brand: Schneider Electric

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

8critical18high9medium0low

updated 2026-10-27

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-7842US	critical9.8	35.0% (98th)	Exploit	no fix	2019-05-22	≤ 2.90
CVE-2018-7846US	critical9.8	29.6% (98th)	Exploit	no fix	2019-05-22	≤ 2.90
CVE-2018-7849US	high7.5	3.29% (88th)	Exploit	no fix	2019-05-22	≤ 2.90
CVE-2018-7848US	high7.5	3.28% (88th)	Exploit	no fix	2019-05-22	≤ 2.90
CVE-2018-7845US	high7.5	3.28% (88th)	Exploit	no fix	2019-05-22	≤ 2.80
CVE-2018-7843US	high7.5	3.16% (88th)	Exploit	no fix	2019-05-22	≤ 2.90
CVE-2018-7844US	high7.5	2.85% (87th)	Exploit	no fix	2019-05-22	—
CVE-2018-7854US	high7.5	2.30% (83rd)	Exploit	no fix	2019-05-22	≤ 2.90
CVE-2019-6848US	high8.6	32.1% (98th)	—	no fix	2019-10-29	—
CVE-2019-6841US	medium4.9	23.7% (98th)	—	no fix	2019-10-29	—
CVE-2019-6808US	critical9.8OT elevated	8.16% (95th)	—	no fix	2019-05-22	≤ 2.90
CVE-2018-7847US	critical9.8	3.81% (90th)	—	no fix	2019-05-22	≤ 2.90
CVE-2018-7855US	high7.5	2.65% (86th)	—	no fix	2019-05-22	≤ 2.90
CVE-2019-6806US	high7.5	2.30% (83rd)	—	no fix	2019-05-22	—
CVE-2019-6807US	high7.5	2.24% (83rd)	—	no fix	2019-05-22	≤ 2.90
CVE-2019-6821US	medium6.5OT elevated	1.93% (80th)	—	no fix	2019-05-22	≤ 2.30
CVE-2018-7853US	high7.5	1.82% (79th)	—	no fix	2019-05-22	—
CVE-2019-6850US	high7.5	1.71% (77th)	—	no fix	2019-10-29	—
CVE-2019-6849US	high7.5	1.71% (77th)	—	no fix	2019-10-29	—
CVE-2020-7475US	critical9.8	1.58% (75th)	—	no fix	2020-03-23	≤ 3.10
CVE-2018-7850US	medium5.3	1.51% (74th)	—	no fix	2019-05-22	≤ 2.90
CVE-2020-7537US	high7.5	1.40% (72nd)	—	no fix	2020-12-11	≤ 3.20
CVE-2022-45788US	critical9.8	1.17% (67th)	—	no fix	2023-01-30	—
CVE-2018-7851US	medium6.5	1.17% (67th)	—	no fix	2019-05-22	≤ 2.50
CVE-2019-6819US	high7.5	1.13% (66th)	—	no fix	2019-05-22	≤ 2.80
CVE-2019-6845US	high7.5OT elevated	1.06% (64th)	—	no fix	2019-10-29	—
CVE-2021-22779US	critical9.1	1.05% (64th)	—	no fix	2021-07-14	—
CVE-2019-6846US	medium6.5OT elevated	0.98% (62nd)	—	no fix	2019-10-29	—
CVE-2019-6847US	medium4.9	0.96% (61st)	—	no fix	2019-10-29	—
CVE-2019-6844US	medium4.9	0.96% (61st)	—	no fix	2019-10-29	—
CVE-2019-6843US	medium4.9	0.96% (61st)	—	no fix	2019-10-29	—
CVE-2019-6842US	medium4.9	0.96% (61st)	—	no fix	2019-10-29	—
CVE-2022-37300US	critical9.8	0.77% (55th)	—	no fix	2022-09-12	≤ 3.22
CVE-2022-37301US	high7.5	0.75% (55th)	—	no fix	2022-11-22	≤ 4.01
CVE-2021-22786US	high7.5	0.63% (50th)	—	no fix	2023-02-01	≤ 4.01

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-248Uncaught Exception12 CVEs
CWE-755Improper Handling of Exceptional Conditions8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-754Improper Check for Unusual or Exceptional Conditions6 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-290Authentication Bypass by Spoofing2 CVEs
CWE-319Cleartext Transmission of Sensitive Information2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan