CVE-2021-22800: Schneider Electric Modicon m218 Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP. Affected Product: Modicon M218 Logic Controller (V5.1.0.6 and prior)

Affected products

• Schneider Electric Modicon m218 Firmware: up to and including 5.1.0.6

Published 2022-02-11. Last modified 2026-06-17.