Home

Description

A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted set of network packets can lead to denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

PUBLISHED Reserved 2025-02-19 | Published 2025-12-01 | Updated 2025-12-01 | Assigner talos




HIGH: 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Problem types

CWE-20: Improper Input Validation

Product status

1.6.9
affected

Credits

Discovered by Kelly Patterson of Cisco Talos.

References

www.talosintelligence.com/...ability_reports/TALOS-2025-2152

talosintelligence.com/vulnerability_reports/TALOS-2025-2152

www.socomec.fr/...BILITIES_2025-10-01-16-38-44_English_0.pdf

cve.org (CVE-2025-26858)

nvd.nist.gov (CVE-2025-26858)

Download JSON