High · published December 1, 2025
🚨 A crafty series of packets is all it takes to trigger a denial-of-service in the Socomec DIRIS Digiware M-70! ⚡ Think of it like a restaurant where a customer keeps sending back their food with increasingly bizarre requests — soon enough, the kitchen is so busy trying to comply that they can’t serve anyone else, causing total chaos! An attacker could send a sequence of unauthenticated Modbus TCP packets that disrupt the device's functionality, leaving it completely unresponsive. This is absolutely devastating for any operations relying on the device, as it can bring critical processes to a grinding halt!
Think of it like a restaurant where a customer keeps sending back their food with increasingly bizarre requests — soon enough, the kitchen is so busy trying to comply that they can’t serve anyone else, causing total chaos! This vulnerability lies in the Modbus TCP and RTU implementation, allowing attackers to trigger a denial-of-service state by sending a specific sequence of messages to port 502, manipulating the configuration of the device. Once triggered, the device becomes entirely unavailable until manually reset.
An attacker could send a sequence of unauthenticated Modbus TCP packets that disrupt the device's functionality, leaving it completely unresponsive. This is absolutely devastating for any operations relying on the device, as it can bring critical processes to a grinding halt! To protect against this vulnerability, patch the Socomec DIRIS Digiware M-70 to version 1.6.10 or later immediately. Additionally, consider implementing network access controls to limit exposure to only trusted devices. Regularly audit your network for unauthorized packet flows. You've got this! With these steps, you can secure your device and keep everything running smoothly. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| socomec/diris_digiware_m-70_firmware | all versions | — |