VULNERABILITY INTELLIGENCE

CVE-2025-55221

CVSS score8.6 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2025-12-01
Last modified2026-09-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Description

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus TCP over port 502.

Weakness classification

  • talos-cna@cisco.com: CWE-306

Primary references