VULNERABILITY INTELLIGENCE
CVE-2025-55222
CVSS score8.6 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2025-12-01
Last modified2026-09-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Description
A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus RTU over TCP on port 503.
Weakness classification
- talos-cna@cisco.com: CWE-306
Primary references
- talos-cna@cisco.com — Vendor Advisory