VulnSocial

CVE-2025-55222Disclosure(socomec / diris_m-70)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus RTU over TCP on port 503.

socomec CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • diris_m-70
  • diris_m-70_firmware

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
socomec
Products
diris_m-70diris_m-70_firmware

2 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-18: 1Technical Details · 2026-02-18: 102-18
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ProbablyPwned@probablypwned
    Disclosure

    Cisco Talos researcher uncovers critical vulnerabilities in Socomec DIRIS M-70 energy gateway via 'good enough' emulation, revealing CVE-2025-54848 and CVE-2025-55222 in Modbus protocol handling. Read more: https://www.probablypwned.com/article/talos-good-enough-emulation-fuzzing-socomec-modbus-cves

    Post summary

    Cisco Talos researcher reports two critical Modbus protocol handling CVEs in the Socomec DIRIS M‑70 energy gateway, discovered through 'good enough' emulation.

    1000046
    12 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWsocomecdiris_m-70---
OSsocomecdiris_m-70_firmware1.6.9--

Explore more

Back to dashboardsocomec CVEsdiris_m-70 vulnerabilities