High · published December 1, 2025
⚡ Just one crafty message is all it takes to send the Socomec DIRIS Digiware M-70 into a denial-of-service tailspin! 🔥 Think of this vulnerability like a single prank call that causes a busy restaurant to freeze up — the moment someone dials that one specific number, the whole place can’t take any more orders. It's a simple action that leads to chaos. An attacker could disrupt operations by sending a single Modbus TCP message, leaving the device completely unresponsive. This denial-of-service condition could halt critical monitoring and control functions, potentially leading to significant downtime. The effects can be particularly devastating in environments where reliability is key.
Think of this vulnerability like a single prank call that causes a busy restaurant to freeze up — the moment someone dials that one specific number, the whole place can’t take any more orders. It's a simple action that leads to chaos. This vulnerability resides in the Modbus TCP and Modbus RTU over TCP functionality, where an attacker can trigger a denial-of-service by sending a specific packet sequence to port 503, altering the Modbus address and causing the device to crash.
An attacker could disrupt operations by sending a single Modbus TCP message, leaving the device completely unresponsive. This denial-of-service condition could halt critical monitoring and control functions, potentially leading to significant downtime. The effects can be particularly devastating in environments where reliability is key. To protect your systems, you should patch the Socomec DIRIS Digiware M-70 to version 1.6.10 or higher immediately. Additionally, consider implementing network access controls to restrict unauthenticated packets from reaching sensitive devices. Regularly review your network configurations to ensure robust security. You've got this! Follow these steps, and you'll have your defenses in place in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| socomec/diris_m-70_firmware | all versions | — |