Diris M 70
Approved changes feed: RSS · Atom
cpe:2.3:h:socomec:diris_m-70:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Socomec (b2889dfa-9d82-58cf-9a0a-02ccbb62a6ab) |
|---|---|
| Product | Diris M 70 (2903c65e-5435-529b-a82f-6f7334720dd9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-55222 |
not_vulnerable | 2026-06-08 07:33:14.377851 |
Details available
HIGH (8.6)
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus RTU over TCP on port 503.
Published: 2025-12-01T15:25:07.167Z
Updated: 2025-12-01T20:15:09.010Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55221 |
not_vulnerable | 2026-06-08 07:33:14.377412 |
Details available
HIGH (8.6)
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus TCP over port 502.
Published: 2025-12-01T15:25:06.962Z
Updated: 2025-12-01T20:14:33.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54851 |
not_vulnerable | 2026-06-08 07:33:13.480461 |
Details available
HIGH (7.5)
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.An attacker can trigger this denial-of-service condition by sending a single Modbus TCP message to port 503 using the Write Single Register function code (6) to write the value 1 to register 4352. This action changes the Modbus address to 15. After this message is sent, the device will be in a denial-of-service state.
Published: 2025-12-01T15:25:13.358Z
Updated: 2025-12-01T20:17:51.595Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54850 |
not_vulnerable | 2026-06-08 07:33:13.479876 |
Details available
HIGH (7.5)
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.An attacker can trigger this denial-of-service condition by sending a sequence of Modbus RTU over TCP messages to port 503 using the Write Single Register function code (6). The attack sequence begins with a message to register 58112 with a value of 1000, indicating that a configuration change will follow. Next, a message is sent to register 29440 with a value corresponding to the new Modbus address to be configured. Finally, a message to register 57856 with a value of 161 commits the configuration change.
After this configuration change, the device will be in a denial-of-service state.
Published: 2025-12-01T15:25:13.229Z
Updated: 2025-12-01T20:16:58.316Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26858 |
not_vulnerable | 2026-06-08 07:14:50.576673 |
Details available
HIGH (8.6)
A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted set of network packets can lead to denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
Published: 2025-12-01T15:25:19.672Z
Updated: 2025-12-01T20:18:50.556Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23417 |
not_vulnerable | 2026-06-08 07:10:55.726316 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-20085 |
not_vulnerable | 2026-06-08 07:08:38.904251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53684 |
not_vulnerable | 2026-06-08 06:54:15.245682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49572 |
not_vulnerable | 2026-06-08 06:50:14.265627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48894 |
not_vulnerable | 2026-06-08 06:50:11.653508 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48882 |
not_vulnerable | 2026-06-08 06:50:11.266827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.