CVE-2024-48882

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.

Score

CVSS 3.1 8.6 High

Status

Analyzed - talos-cna@cisco.com

Published

2025-12-01

Last modified

2025-12-01

Weaknesses

CWE-306

Affected products

• Diris Digiware M-70 (Socomec)
• Diris M-70 Firmware (Socomec)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2119
• https://www.socomec.fr/sites/default/files/2025-04/CVE-2024-48882---Diris-Digiware-Webview-_VULNERABILITIES_2025-04-11-…
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2119