PT-2025-48480 · Socomec · Diris Digiware M-70

Kelly Patterson · Published 2025-08-21 · Updated 2025-12-05 · CVE-2025-54851

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Socomec DIRIS Digiware M-70 version 1.6.9

Description A denial of service condition can occur due to specially crafted network requests targeting the Modbus TCP and Modbus RTU over TCP functionality. An attacker can trigger this by sending unauthenticated packets. Specifically, sending a Modbus TCP message to port 503 using the Write Single Register function code (6) to write the value 1 to register 4352 changes the Modbus address to 15, resulting in a denial-of-service state.

Recommendations For Socomec DIRIS Digiware M-70 version 1.6.9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-15278

CVE-2025-54851

Affected Products

Diris Digiware M-70

References · 8

• https://osv.dev/vulnerability/CVE-2025-54851 · Vendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2248 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15278 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-54851 · Security Note
• https://twitter.com/syedaquib77/status/1996825307567759510 · Twitter Post
• https://t.me/CVEtracker/38545 · Telegram Post
• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2249 · Note
• https://twitter.com/CVEnew/status/1995519576277123440 · Twitter Post