High · published December 1, 2025
⚡ A specially crafted packet is all it takes to send the Socomec DIRIS Digiware M-70 into a tailspin! Think of it like a restaurant where a rogue diner sends a fake order to the kitchen, causing chaos and halting service altogether. The kitchen gets overwhelmed, and suddenly no one can eat! With this denial of service vulnerability, an attacker could easily crash the device, leaving critical monitoring features in the dark. This means you could lose real-time insights and control over your energy management systems — absolutely devastating for operational efficiency!
Think of it like a restaurant where a rogue diner sends a fake order to the kitchen, causing chaos and halting service altogether. The kitchen gets overwhelmed, and suddenly no one can eat! CVE-2025-23417 is a denial of service vulnerability in the Modbus RTU over TCP functionality of the Socomec DIRIS Digiware M-70 version 1.6.9. An attacker can send an unauthenticated specially crafted packet, leading to a crash and loss of service.
With this denial of service vulnerability, an attacker could easily crash the device, leaving critical monitoring features in the dark. This means you could lose real-time insights and control over your energy management systems — absolutely devastating for operational efficiency! To protect against this vulnerability, immediately update the Socomec DIRIS Digiware M-70 to the latest version. Ensure that your network configurations limit exposure to unauthorized packets and monitor traffic for unusual activity. Staying informed on updates can also help maintain security. You've got this! Follow these steps to keep your systems running smoothly and securely! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| socomec/diris_m-70_firmware | all versions | — |