What is CVE-2025-55222?

CVE-2025-55222 is a high-severity vulnerability in Socomec Diris Digiware M-70, classified under Missing Authentication for Critical Function. CVSS score: 8.6/10. Published 2025-12-01.

How severe is CVE-2025-55222?

High severity. CVSS v3 base score is 8.6 out of 10.

Auth bypass in Socomec Diris Digiware M-70

CVE-2025-55222

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This vulnerability is specific to the malicious message sent via Modbus RTU over TCP on port 503.

Vulnerability class: Broken Authentication

EPSS: 0.004 (29.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Socomec Diris Digiware M-70 — versions 1.6.9
Socomec Diris_m-70
Socomec Diris_m-70_firmware — versions 1.6.9

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

talos-cna@cisco.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-55222?: CVE-2025-55222 is a high-severity vulnerability in Socomec Diris Digiware M-70, classified under Missing Authentication for Critical Function. CVSS score: 8.6/10. Published 2025-12-01.
How severe is CVE-2025-55222?: High severity. CVSS v3 base score is 8.6 out of 10.