CVE-2025-55221

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus TCP over port 502.

CVSS v3 8.6 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2251	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:socomec:diris_m-70_firmware:1.6.9:*:*:*:*:*:*:*

cpe:2.3:h:socomec:diris_m-70:-:*:*:*:*:*:*:*

History

26 Sep 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de denegación de servicio existe en la funcionalidad de la función USB Modbus TCP y Modbus RTU sobre TCP de Socomec DIRIS Digiware M-70 1.6.9. Un paquete de red especialmente diseñado puede conducir a una denegación de servicio. Un atacante puede enviar un paquete no autenticado para activar esta vulnerabilidad. Esta vulnerabilidad es específica para el mensaje malicioso enviado a través de Modbus TCP sobre el puerto 502.

Information

Published : 2025-12-01 16:15

Updated : 2026-09-26 00:10

NVD link : CVE-2025-55221

Mitre link : CVE-2025-55221

CVE.ORG link : CVE-2025-55221

JSON object : View

Products Affected

socomec

diris_m-70
diris_m-70_firmware

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2025-55221", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-55221", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-01T20:14:20.890195Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "talos-cna@cisco.com", "affectedData": [{"vendor": "Socomec", "product": "DIRIS Digiware M-70", "versions": [{"status": "affected", "version": "1.6.9"}]}]}], "published": "2025-12-01T16:15:54.443", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2251", "tags": ["Vendor Advisory"], "source": "talos-cna@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus TCP over port 502."}, {"lang": "es", "value": "Una vulnerabilidad de denegaci\u00f3n de servicio existe en la funcionalidad de la funci\u00f3n USB Modbus TCP y Modbus RTU sobre TCP de Socomec DIRIS Digiware M-70 1.6.9. Un paquete de red especialmente dise\u00f1ado puede conducir a una denegaci\u00f3n de servicio. Un atacante puede enviar un paquete no autenticado para activar esta vulnerabilidad. Esta vulnerabilidad es espec\u00edfica para el mensaje malicioso enviado a trav\u00e9s de Modbus TCP sobre el puerto 502."}], "lastModified": "2026-09-26T00:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:socomec:diris_m-70_firmware:1.6.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C07608BE-E7E3-44F5-AE9A-4AE36679F58A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:socomec:diris_m-70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "153A9D26-2C76-4B6B-AFD8-22DEB2081F34"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "talos-cna@cisco.com"}