High · published December 1, 2025
⚡ A crafty packet is all it takes to take down your Modbus TCP functionality! The Socomec DIRIS Digiware M-70 is vulnerable to denial of service from an unauthenticated attacker. 🔥 Think of it like a restaurant where anyone can walk in and ring the bell nonstop. The kitchen gets overwhelmed with orders it never received, causing chaos and shutting down service entirely. This vulnerability could lead to a complete denial of service for the Modbus TCP functionality, meaning legitimate users won't be able to access the services they need. An attacker could easily flood the system with crafted packets, leaving the network virtually incapacitated and operations halted.
Think of it like a restaurant where anyone can walk in and ring the bell nonstop. The kitchen gets overwhelmed with orders it never received, causing chaos and shutting down service entirely. The CVE-2024-48882 vulnerability allows an attacker to exploit the Modbus TCP protocol within the Socomec DIRIS Digiware M-70 by sending specially crafted packets that cause a denial of service, disrupting normal functionality without requiring authentication.
This vulnerability could lead to a complete denial of service for the Modbus TCP functionality, meaning legitimate users won't be able to access the services they need. An attacker could easily flood the system with crafted packets, leaving the network virtually incapacitated and operations halted. To protect against this vulnerability, patch your device to version 1.6.10 or later as soon as possible. Additionally, implement network filtering to block unauthorized access to the Modbus TCP functionality. You've got this! Stay proactive and secure your systems today! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| socomec/diris_m-70_firmware | all versions | — |