CVEvulnerability
CVE-2025-20085
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-12-01
- Last modified
- 2026-09-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-306
Description
A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service and weaken credentials resulting in default documented credentials being applied to the device. An attacker can send an unauthenticated packet to trigger this vulnerability.
Affected configurations
• socomec diris m-70 firmware 1.6.9
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2025-2138 Vendor Advisory
- https://www.socomec.fr/sites/default/files/2025-04/CVE-2025-20085---Diris-Digiware-Webview-_VULNERABILITIES_2025-04-11-17-14-39_English_0.pdf Vendor Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2138 Vendor Advisory