Denial of Service Vulnerability in Socomec DIRIS Digiware M-70

CVE-2025-55221

What is CVE-2025-55221?

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Functionality of the Socomec DIRIS Digiware M-70 version 1.6.9. This vulnerability arises when a specially crafted network packet is sent to the device, potentially causing a disruption in its services. An attacker can exploit this flaw by sending an unauthenticated packet over Modbus TCP, specifically on port 502, which could lead to a service outage for the affected device. Protecting against this vulnerability requires monitoring network traffic and implementing robust firewall rules.

References