High · published December 1, 2025
⚡ One crafted network packet is all it takes to knock out your devices! A security flaw in Socomec DIRIS Digiware M-70 could leave your credentials hanging by a thread. 🔥 Think of this vulnerability like a sneaky delivery driver who doesn't ring the doorbell but just leaves a package, causing your security cameras to crash and revert to factory settings—an open door for attackers! If exploited, an attacker could trigger a denial of service, causing your device to become unresponsive. Even worse, it could revert your device to its default credentials, leaving it wide open for anyone to stroll right in and take control—absolutely devastating!
Think of this vulnerability like a sneaky delivery driver who doesn't ring the doorbell but just leaves a package, causing your security cameras to crash and revert to factory settings—an open door for attackers! This denial of service vulnerability in the Modbus TCP functionality allows an attacker to send unauthenticated packets that disrupt service and can reset credentials to documented defaults, putting your device at serious risk.
If exploited, an attacker could trigger a denial of service, causing your device to become unresponsive. Even worse, it could revert your device to its default credentials, leaving it wide open for anyone to stroll right in and take control—absolutely devastating! Immediately update the Socomec DIRIS Digiware M-70 to version 1.6.10 or later to patch this vulnerability. Consider implementing network segmentation to limit access to the device and monitor logs for unusual packet activity. You've got this! Follow these steps, and you'll have that device locked down in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| socomec/diris_m-70_firmware | all versions | — |