CVE-2025-20085

Published: Dec 1, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service and weaken credentials resulting in default documented credentials being applied to the device. An attacker can send an unauthenticated packet to trigger this vulnerability.

Affected (1)

Products: Socomec: Diris M 70 Firmware

1 product

Diris M 70 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Socomec Diris M 70 Firmware	Version 1.6.9

Running on/with	Platform Versions
Socomec Diris M 70	All versions

Related CWEs

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (3)

https://talosintelligence.com/vulnerability_reports/TALOS-2025-2138

Source: talos-cna@cisco.com

Vendor Advisory

https://www.socomec.fr/sites/default/files/2025-04/CVE-2025-20085---Diris-Digiware-Webview-_VULNERABILITIES_2025-04-11-17-14-39_English_0.pdf

Source: talos-cna@cisco.com

Vendor Advisory

https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2138

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.