← Back

Socomec

socomec

24 CVEs • 11 products

Products (11)

Click to collapse
Toggle
Diris M 70 Firmware
diris_m-70_firmware
11 CVEs
Modulys Gp Firmware
modulys_gp_firmware
7 CVEs
Remote View Pro Firmware
remote_view_pro_firmware
2 CVEs
Diris Digiware M 70 Firmware
diris_digiware_m-70_firmware
2 CVEs
Diris A 40 Firmware
diris_a-40_firmware
1 CVE
Net Vision
net_vision
1 CVE
Diris A 40
diris_a-40
0 CVEs
Remote View Pro
remote_view_pro
0 CVEs
Modulys Gp
modulys_gp
0 CVEs
Diris M 70
diris_m-70
0 CVEs
Diris Digiware M 70
diris_digiware_m-70
0 CVEs

CVEs (24)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-0356
1Socomec
1Net Vision
Jun 17, 2026
Jan 26, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information.
CVE-2021-41871
1Socomec
1Remote View Pro Firmware
Jun 17, 2026
Dec 15, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Eve...Show more
An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log.Show less
CVE-2021-41870
1Socomec
1Remote View Pro Firmware
Jun 17, 2026
Dec 15, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files.
CVE-2019-15859
1Socomec
1Diris A 40 Firmware
Jun 17, 2026
Oct 9, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI.