Approved changes feed: RSS · Atom

cpe:2.3:a:socomec:diris_digiware_m-70:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSocomec (b2889dfa-9d82-58cf-9a0a-02ccbb62a6ab)
ProductDiris Digiware M 70 (0f8ae1d5-306c-5125-9ed7-7f4b89a4a072)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-55222 vulnerable 2026-06-08 07:33:14.377789 Details available
HIGH (8.6)
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus RTU over TCP on port 503.
Published: 2025-12-01T15:25:07.167Z
Updated: 2025-12-01T20:15:09.010Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55221 vulnerable 2026-06-08 07:33:14.377338 Details available
HIGH (8.6)
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus TCP over port 502.
Published: 2025-12-01T15:25:06.962Z
Updated: 2025-12-01T20:14:33.387Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54851 vulnerable 2026-06-08 07:33:13.480310 Details available
HIGH (7.5)
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.An attacker can trigger this denial-of-service condition by sending a single Modbus TCP message to port 503 using the Write Single Register function code (6) to write the value 1 to register 4352. This action changes the Modbus address to 15. After this message is sent, the device will be in a denial-of-service state.
Published: 2025-12-01T15:25:13.358Z
Updated: 2025-12-01T20:17:51.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54850 vulnerable 2026-06-08 07:33:13.477424 Details available
HIGH (7.5)
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.An attacker can trigger this denial-of-service condition by sending a sequence of Modbus RTU over TCP messages to port 503 using the Write Single Register function code (6). The attack sequence begins with a message to register 58112 with a value of 1000, indicating that a configuration change will follow. Next, a message is sent to register 29440 with a value corresponding to the new Modbus address to be configured. Finally, a message to register 57856 with a value of 161 commits the configuration change. After this configuration change, the device will be in a denial-of-service state.
Published: 2025-12-01T15:25:13.229Z
Updated: 2025-12-01T20:16:58.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54849 vulnerable 2026-06-08 07:33:13.476989 Details available
HIGH (7.5)
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.An attacker can trigger this denial-of-service condition by sending a single Modbus TCP message to port 502 using the Write Single Register function code (6) to write the value 1 to register 4352. This action changes the Modbus address to 15. After this message is sent, the device will be in a denial-of-service state.
Published: 2025-12-01T15:25:13.025Z
Updated: 2025-12-01T20:16:27.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54848 vulnerable 2026-06-08 07:33:13.475083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26858 vulnerable 2026-06-08 07:14:50.574578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23417 vulnerable 2026-06-08 07:10:55.724427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20085 vulnerable 2026-06-08 07:08:38.902708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53684 vulnerable 2026-06-08 06:54:15.244215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49572 vulnerable 2026-06-08 06:50:14.265378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48894 vulnerable 2026-06-08 06:50:11.653325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48882 vulnerable 2026-06-08 06:50:11.265044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.