Denial of Service Vulnerability in Socomec DIRIS Digiware M-70

CVE-2025-54851

What is CVE-2025-54851?

A denial of service vulnerability has been identified in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 version 1.6.9. This vulnerability can be exploited by sending a specific sequence of unauthenticated Modbus TCP packets to port 503. By using the Write Single Register function code (6) to set the value of register 4352 to 1, an attacker can modify the Modbus address, resulting in a service disruption that forces the device into a denial-of-service state.

References