High · published December 1, 2025
🚨 A crafty sequence of Modbus packets is all it takes to bring the Socomec DIRIS Digiware M-70 to its knees! ⚡ Think of it like trying to enter a party by giving the bouncer an incorrect password three times in a row. Each wrong attempt leads to being locked out entirely, just like these specially crafted requests leave the device in a denial-of-service state! If exploited, an attacker could effectively lock you out of the device, causing significant disruption to operations. This denial-of-service vulnerability could halt monitoring and control functions, leading to absolutely devastating consequences for your system's reliability and performance. Who wants to deal with a party where no one's allowed in? 😱
Think of it like trying to enter a party by giving the bouncer an incorrect password three times in a row. Each wrong attempt leads to being locked out entirely, just like these specially crafted requests leave the device in a denial-of-service state! This denial of service vulnerability lies in the Modbus TCP and Modbus RTU over TCP functionality of the Socomec DIRIS Digiware M-70 version 1.6.9. By sending a sequence of crafted messages to port 503 using the Write Single Register function, an attacker can trigger a denial-of-service condition by manipulating device configurations.
If exploited, an attacker could effectively lock you out of the device, causing significant disruption to operations. This denial-of-service vulnerability could halt monitoring and control functions, leading to absolutely devastating consequences for your system's reliability and performance. Who wants to deal with a party where no one's allowed in? 😱 Immediately patch your Socomec DIRIS Digiware M-70 to version 1.6.10 or later to address this vulnerability. Additionally, implement network filtering rules to restrict access to port 503, and monitor for any unusual traffic that could indicate an attempt to exploit this flaw. You've got this! With these steps, you can secure your device and hold onto your superhero status! 🦸♂️
| Product | Versions | Fixed in |
|---|---|---|
| socomec/diris_m-70_firmware | all versions | — |