CVE-2025-54851

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.An attacker can trigger this denial-of-service condition by sending a single Modbus TCP message to port 503 using the Write Single Register function code (6) to write the value 1 to register 4352. This action changes the Modbus address to 15. After this message is sent, the device will be in a denial-of-service state.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2248	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:socomec:diris_m-70_firmware:1.6.9:*:*:*:*:*:*:*

cpe:2.3:h:socomec:diris_m-70:-:*:*:*:*:*:*:*

History

26 Sep 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de denegación de servicio existe en la funcionalidad Modbus TCP y Modbus RTU sobre TCP de Socomec DIRIS Digiware M-70 1.6.9. Una serie de solicitudes de red especialmente diseñadas puede conducir a una denegación de servicio. Un atacante puede enviar una secuencia de paquetes no autenticados para activar esta vulnerabilidad. Un atacante puede activar esta condición de denegación de servicio enviando un único mensaje Modbus TCP al puerto 503 utilizando el código de función Write Single Register (6) para escribir el valor 1 en el registro 4352. Esta acción cambia la dirección Modbus a 15. Después de que se envía este mensaje, el dispositivo estará en un estado de denegación de servicio.

Information

Published : 2025-12-01 16:15

Updated : 2026-09-26 00:10

NVD link : CVE-2025-54851

Mitre link : CVE-2025-54851

CVE.ORG link : CVE-2025-54851

JSON object : View

Products Affected

socomec

diris_m-70
diris_m-70_firmware

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2025-54851", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-54851", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-01T20:17:37.407645Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "talos-cna@cisco.com", "affectedData": [{"vendor": "Socomec", "product": "DIRIS Digiware M-70", "versions": [{"status": "affected", "version": "1.6.9"}]}]}], "published": "2025-12-01T16:15:54.260", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2248", "tags": ["Vendor Advisory"], "source": "talos-cna@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.An attacker can trigger this denial-of-service condition by sending a single Modbus TCP message to port 503 using the Write Single Register function code (6) to write the value 1 to register 4352. This action changes the Modbus address to 15. After this message is sent, the device will be in a denial-of-service state."}, {"lang": "es", "value": "Una vulnerabilidad de denegaci\u00f3n de servicio existe en la funcionalidad Modbus TCP y Modbus RTU sobre TCP de Socomec DIRIS Digiware M-70 1.6.9. Una serie de solicitudes de red especialmente dise\u00f1adas puede conducir a una denegaci\u00f3n de servicio. Un atacante puede enviar una secuencia de paquetes no autenticados para activar esta vulnerabilidad. Un atacante puede activar esta condici\u00f3n de denegaci\u00f3n de servicio enviando un \u00fanico mensaje Modbus TCP al puerto 503 utilizando el c\u00f3digo de funci\u00f3n Write Single Register (6) para escribir el valor 1 en el registro 4352. Esta acci\u00f3n cambia la direcci\u00f3n Modbus a 15. Despu\u00e9s de que se env\u00eda este mensaje, el dispositivo estar\u00e1 en un estado de denegaci\u00f3n de servicio."}], "lastModified": "2026-09-26T00:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:socomec:diris_m-70_firmware:1.6.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C07608BE-E7E3-44F5-AE9A-4AE36679F58A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:socomec:diris_m-70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "153A9D26-2C76-4B6B-AFD8-22DEB2081F34"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "talos-cna@cisco.com"}