High · published December 1, 2025
🚨 An attacker just needs to send a crafty packet to trigger a denial of service in the Socomec DIRIS Digiware M-70! ⚡ Think of it like a restaurant where a single rude customer sends back dish after dish, making the entire kitchen stall — that's how this packet can overwhelm the system and bring operations to a halt. If exploited, this vulnerability could leave your system in a state of chaos, causing a denial of service. Imagine critical monitoring services going offline, leading to a complete loss of control over your energy management. This can result in downtime, lost productivity, and potential safety risks!
Think of it like a restaurant where a single rude customer sends back dish after dish, making the entire kitchen stall — that's how this packet can overwhelm the system and bring operations to a halt. The vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Functionality, where an unauthenticated packet sent over port 503 can crash the service, preventing legitimate communication and operations.
If exploited, this vulnerability could leave your system in a state of chaos, causing a denial of service. Imagine critical monitoring services going offline, leading to a complete loss of control over your energy management. This can result in downtime, lost productivity, and potential safety risks! To safeguard your systems, ensure you patch to version 1.6.10 or later of the Socomec DIRIS Digiware software. Also, consider implementing network-level protections to filter out unauthorized Modbus traffic on port 503. Your proactive steps can make all the difference! You’ve got this! Follow these steps to secure your setup, and you'll be a security hero in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| socomec/diris_m-70_firmware | all versions | — |