Vulnerability index

Browse CVEs

24 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Diris M 70 Firmware HIGH 7.5
CVE-2025-54850

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially cr…

Mitigation only
Fix from $1,950 2025-12-01
Diris M 70 Firmware HIGH 7.5
CVE-2025-54851

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially cr…

Mitigation only
Fix from $1,950 2025-12-01
Diris M 70 Firmware HIGH 7.5
CVE-2025-55221

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A…

Mitigation only
Fix from $1,950 2025-12-01
Diris M 70 Firmware HIGH 7.5
CVE-2025-55222

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A…

Mitigation only
Fix from $1,950 2025-12-01
Diris Digiware M 70 Firmware HIGH 7.5
CVE-2025-54848

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially cr…

Mitigation only
Fix from $1,950 2025-12-01
Diris Digiware M 70 Firmware HIGH 7.5
CVE-2025-54849

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially cr…

Mitigation only
Fix from $1,950 2025-12-01
Diris M 70 Firmware HIGH 7.5
CVE-2025-23417

A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network p…

Mitigation only
Fix from $1,950 2025-12-01
Diris M 70 Firmware HIGH 7.5
CVE-2025-26858

A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted set of network packe…

Mitigation only
Fix from $1,950 2025-12-01
Diris M 70 Firmware MEDIUM 6.5
CVE-2025-20085

A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network p…

Mitigation only
Fix from $1,600 2025-12-01
Diris M 70 Firmware HIGH 8.8
CVE-2024-53684

A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTT…

Mitigation only
Fix from $1,950 2025-12-01
Diris M 70 Firmware HIGH 7.5
CVE-2024-48894

A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request c…

Mitigation only
Fix from $1,950 2025-12-01
Diris M 70 Firmware MEDIUM 6.5
CVE-2024-49572

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can…

Mitigation only
Fix from $1,600 2025-12-01
Diris M 70 Firmware HIGH 7.5
CVE-2024-48882

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can…

Mitigation only
Fix from $1,950 2025-12-01
Modulys Gp Firmware HIGH 7.5
CVE-2023-39452

The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done re…

No fix yet
Fix from $1,950 2023-09-18
Modulys Gp Firmware HIGH 8.8
CVE-2023-39446

Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is…

No fix yet
Fix from $1,950 2023-09-18
Modulys Gp Firmware MEDIUM 5.4
CVE-2023-38582

Persistent cross-site scripting (XSS) in the web application of MOD3GP-SY-120K allows an authenticated remote attacker to introduce arbitrary JavaScr…

Mitigation only
Fix from $1,600 2023-09-18
Modulys Gp Firmware MEDIUM 6.1
CVE-2023-38255

A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new device conf…

Mitigation only
Fix from $1,600 2023-09-18
Modulys Gp Firmware CRITICAL 9.8
CVE-2023-41084

Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the w…

No fix yet
Fix from $2,300 2023-09-18
Modulys Gp Firmware HIGH 7.5
CVE-2023-41965

Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentica…

No fix yet
Fix from $1,950 2023-09-18
Modulys Gp Firmware HIGH 8.8
CVE-2023-40221

The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code…

Mitigation only
Fix from $1,950 2023-09-18
Net Vision HIGH 7.5
CVE-2023-0356

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors …

Fix: after 7.20
Fix from $1,950 2023-01-26
Remote View Pro Firmware HIGH 8.8
CVE-2021-41870

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type…

Mitigation only
Fix from $1,950 2021-12-15
Remote View Pro Firmware MEDIUM 5.4
CVE-2021-41871

An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored…

Mitigation only
Fix from $1,600 2021-12-15
Diris A 40 Firmware CRITICAL 9.8
CVE-2019-15859EPSS 31%

Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via th…

Fix: 48250501+
Fix from $2,300 2019-10-09