High · published December 1, 2025
⚡ A single crafted packet can bring your Socomec DIRIS Digiware M-70 to its knees! This denial of service vulnerability can even revert your credentials to their defaults. 😱 Think of it like a mischievous prankster who slips a fake invitation past the doorman at a fancy restaurant, causing chaos inside while also unlocking the front door for everyone else. That's essentially what this vulnerability does with your device's security! An attacker can fire off this unauthenticated packet, leading to a denial of service that disrupts operations. To make matters worse, it can revert the device’s credentials to the default ones, leaving it wide open for anyone to take the reins. Your device could be effectively rendered useless and left vulnerable, all thanks to one sneaky packet!
Think of it like a mischievous prankster who slips a fake invitation past the doorman at a fancy restaurant, causing chaos inside while also unlocking the front door for everyone else. That's essentially what this vulnerability does with your device's security! In the Modbus RTU over TCP functionality of the affected version 1.6.9, an attacker can exploit a denial of service vulnerability by sending a specially crafted network packet. This can weaken security measures by applying default credentials to the device.
An attacker can fire off this unauthenticated packet, leading to a denial of service that disrupts operations. To make matters worse, it can revert the device’s credentials to the default ones, leaving it wide open for anyone to take the reins. Your device could be effectively rendered useless and left vulnerable, all thanks to one sneaky packet! To safeguard your system, immediately upgrade to a fixed version beyond 1.6.9. Additionally, ensure that network access is strictly controlled and monitored to prevent unauthorized packets from reaching the device. You've got this! Follow these steps, and you'll bolster your security in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| socomec/diris_m-70_firmware | all versions | — |