“Good enough” emulation: Fuzzing a single thread to uncover vulnerabilities

A Cisco Talos researcher worked around the limitations of hardware-level Code Read-out Protection RDP on the Socomec DIRIS M-70 gateway by pivoting from physical debugging to a "good enough" emulation approach. By focusing on emulating only the single thread responsible for Modbus protocol handli...

CVE-2025-23417

A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability...

The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication switches allows a intruder to cause a service failure.

The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions.

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented by DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions.

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented by DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions.

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented by DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Modbus TCP protocol implementation in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions or increase their privileges.

The vulnerability of the Modbus TCP protocol implementation in DIRIS Digiware M-70 microprogramming communication switches is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures or increase their...

The vulnerability of the modbusServerProcessData() function in the DIRIS Digiware M-70 communication gateway’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the modbusServerProcessData function in the DIRIS Digiware M-70 communication gateway software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions.

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented by DIRIS Digiware M-70 communication gateways is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Modbus TCP protocol implementation in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause a service failure.

The vulnerability of the Modbus TCP protocol implementation in DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions.

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented by DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Socomec DIRIS Digiware M-70 Denial of Service Vulnerability (CNVD-2025-30453)

The Socomec DIRIS Digiware M-70 is a communication gateway device that serves as an access point for the DIRIS Digiware system, which combines 24VDC power and communication functions in a single unit. A denial of service vulnerability exists in the Socomec DIRIS Digiware M-70 that stems from the...

Socomec DIRIS Digiware M-70 Buffer Overflow Vulnerability

The Socomec DIRIS Digiware M-70 is a communication gateway device that serves as an access point for the DIRIS Digiware system, which combines 24VDC power and communication functions in a single unit. The Socomec DIRIS Digiware M-70 suffers from a buffer overflow vulnerability that originates fro...

Socomec DIRIS Digiware M-70 Denial of Service Vulnerability

The Socomec DIRIS Digiware M-70 is a communication gateway device that serves as an access point for the DIRIS Digiware system, which combines 24VDC power and communication functions in a single unit. A denial of service vulnerability exists in the Socomec DIRIS Digiware M-70, which stems from th...

Socomec DIRIS Digiware M-70 Denial of Service Vulnerability (CNVD-2025-30454)

The Socomec DIRIS Digiware M-70 is a communication gateway device that serves as an access point for the DIRIS Digiware system, which combines 24VDC power and communication functions in a single unit. A denial of service vulnerability exists in the Socomec DIRIS Digiware M-70 that stems from the...

CVE-2024-48882

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability...

CVE-2024-49572

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service and weaken credentials resulting in default documented credentials being applied to the device. An attacker can send an...

CVE-2025-55222

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This...

CVE-2025-55221

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This...

CVE-2025-55222

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This...