Junglewise Threat Intelligence

CVE-2025-55221: A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70

CVE-2025-55221 · Severity: high · CVSS 8.6 · Published 2025-12-01

Technologies: Socomec Diris M-70, Socomec Diris M-70 Firmware. Vendors: Socomec.

Executive brief

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus TCP over port 502.

Affected products

  • socomec diris_m-70
  • socomec diris_m-70_firmware

Related threats