Browse CVEs

HIGH 7.5 CVE-2025-54850 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially cr… Diris M 70 Firmware Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2025-54851 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially cr… Diris M 70 Firmware Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2025-55221 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A… Diris M 70 Firmware Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2025-55222 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A… Diris M 70 Firmware Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2025-54848 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially cr… Diris Digiware M 70 Firmware Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2025-54849 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially cr… Diris Digiware M 70 Firmware Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2025-23417 A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network p… Diris M 70 Firmware Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2025-26858 A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted set of network packe… Diris M 70 Firmware Mitigation only Fix from $1,9502025-12-01 MEDIUM 6.5 CVE-2025-20085 A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network p… Diris M 70 Firmware Mitigation only Fix from $1,6002025-12-01 HIGH 8.8 CVE-2024-53684 A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTT… Diris M 70 Firmware Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2024-48894 A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request c… Diris M 70 Firmware Mitigation only Fix from $1,9502025-12-01 MEDIUM 6.5 CVE-2024-49572 A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can… Diris M 70 Firmware Mitigation only Fix from $1,6002025-12-01 HIGH 7.5 CVE-2024-48882 A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can… Diris M 70 Firmware Mitigation only Fix from $1,9502025-12-01 HIGH 7.5 CVE-2023-39452 The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done re… Modulys Gp Firmware No fix yet Fix from $1,9502023-09-18 HIGH 8.8 CVE-2023-39446 Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the information from the headers that is… Modulys Gp Firmware No fix yet Fix from $1,9502023-09-18 MEDIUM 5.4 CVE-2023-38582 Persistent cross-site scripting (XSS) in the web application of MOD3GP-SY-120K allows an authenticated remote attacker to introduce arbitrary JavaScr… Modulys Gp Firmware Mitigation only Fix from $1,6002023-09-18 MEDIUM 6.1 CVE-2023-38255 A potential attacker with or without (cookie theft) access to the device would be able to include malicious code (XSS) when uploading new device conf… Modulys Gp Firmware Mitigation only Fix from $1,6002023-09-18 CRITICAL 9.8 CVE-2023-41084 Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the w… Modulys Gp Firmware No fix yet Fix from $2,3002023-09-18 HIGH 7.5 CVE-2023-41965 Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentica… Modulys Gp Firmware No fix yet Fix from $1,9502023-09-18 HIGH 8.8 CVE-2023-40221 The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code… Modulys Gp Firmware Mitigation only Fix from $1,9502023-09-18 HIGH 7.5 CVE-2023-0356 SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors … Net Vision after 7.20 Fix from $1,9502023-01-26 HIGH 8.8 CVE-2021-41870 An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type… Remote View Pro Firmware Mitigation only Fix from $1,9502021-12-15 MEDIUM 5.4 CVE-2021-41871 An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored… Remote View Pro Firmware Mitigation only Fix from $1,6002021-12-15 CRITICAL 9.8 CVE-2019-15859EPSS 31% Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via th… Diris A 40 Firmware 48250501+ Fix from $2,3002019-10-09