ID

VAR-202512-0006

CVE

CVE-2025-54849

TITLE

Socomec DIRIS Digiware M-70 Denial-of-Service Vulnerability (CNVD-2025-30455)

DESCRIPTION

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.An attacker can trigger this denial-of-service condition by sending a single Modbus TCP message to port 502 using the Write Single Register function code (6) to write the value 1 to register 4352. This action changes the Modbus address to 15. After this message is sent, the device will be in a denial-of-service state. The Socomec DIRIS Digiware M-70 is a communication gateway device that serves as the access point for the DIRIS Digiware system, integrating 24VDC power and communication functions into a single unit. The Socomec DIRIS Digiware M-70 contains a denial-of-service vulnerability stemming from the Modbus TCP function's failure to properly restrict resource access from unauthorized roles. An attacker could exploit this vulnerability to cause a denial-of-service attack

IOT TAXONOMY

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

PATCH

EXTERNAL IDS

REFERENCES

SOURCES

LAST UPDATE DATE

2025-12-19T22:35:25.234000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE