Socomec vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-55222 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9.High 8.6 · Dec 1, 2025
• CVE-2025-55221 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9.High 8.6 · Dec 1, 2025
• CVE-2025-54851 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.High 7.5 · Dec 1, 2025
• CVE-2025-54850 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.High 7.5 · Dec 1, 2025
• CVE-2025-54849 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.High 7.5 · Dec 1, 2025
• CVE-2025-54848 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.High 7.5 · Dec 1, 2025
• CVE-2025-26858 A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.High 8.6 · Dec 1, 2025
• CVE-2025-23417 A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.High 8.6 · Dec 1, 2025
• CVE-2025-20085 A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.High 7.2 · Dec 1, 2025
• CVE-2024-53684 A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9.High 7.5 · Dec 1, 2025
• CVE-2024-49572 A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.High 7.2 · Dec 1, 2025
• CVE-2024-48882 A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.High 8.6 · Dec 1, 2025
• CVE-2024-45370 An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2.6.1.0.High 7.3 · Dec 1, 2025
• CVE-2024-4600 Cross-Site Request Forgery vulnerability in Socomec Net Vision, version 7.20.High 7.1 · May 7, 2024
• CVE-2023-39452 The web application that owns the device clearly stores the credentials within the user management section.High 7.5 · Sep 18, 2023
• CVE-2023-39446 Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is necHigh 8.9 · Sep 18, 2023
• CVE-2023-41965 Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication procesHigh 7.5 · Sep 18, 2023
• CVE-2023-41084 Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the wCritical 10 · Sep 18, 2023
• CVE-2023-40221 The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious coHigh 8.8 · Sep 18, 2023
• CVE-2021-41870 An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4.High 8.8 · Dec 15, 2021
• CVE-2019-15859 Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /passwordCritical 9.8 · Oct 9, 2019