Log in Start free

SOCOMEC

Products

ProductCVEsExploitedLatest
DIRIS Digiware M-7013–Dec 1, 2025
MODULYS GP (MOD3GP-SY-120K)7–Sep 18, 2023
Net vision2–May 7, 2024
DIRIS A-401–Mar 13, 2026
Easy Config System1–Dec 1, 2025
MODULYS GP 1–Jan 24, 2023

Exploited and recent CVEs

  • CVE-2026-2491 Medium 6.3 Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability 0.5%
  • CVE-2024-48894 Medium 5.9 A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to a disclosure of sensitive information. A 1.1%
  • CVE-2024-53684 High 7.5 A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to unauthorized access. An attac 0.3%
  • CVE-2024-45370 High 7.3 An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2.6.1.0. A specially crafted database record can lead to unauthorized access. A 0.2%
  • CVE-2024-49572 High 7.2 A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service and weaken credentials r 0.4%
  • CVE-2024-48882 High 8.6 A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service. An attacker can send an 0.6%
  • CVE-2025-20085 High 7.2 A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service and weaken cred 0.4%
  • CVE-2025-23417 High 8.6 A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service. An attacker ca 0.6%
  • CVE-2025-26858 High 8.6 A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted set of network packets can lead to denial of service. An attacker can s 0.7%
  • CVE-2025-54851 High 7.5 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a deni 0.5%
  • CVE-2025-54850 High 7.5 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a deni 0.3%
  • CVE-2025-54849 High 7.5 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a deni 0.3%
  • CVE-2025-54848 High 7.5 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a deni 0.4%
  • CVE-2025-55222 High 8.6 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a den 0.4%
  • CVE-2025-55221 High 8.6 A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a den 0.4%
  • CVE-2024-4601 Medium 6.7 Improper Authentication vulnerability in Socomec Net Vision 0.2%
  • CVE-2024-4600 High 7.1 Cross-Site Request Forgery vulnerability in Socomec Net Vision 0.2%
  • CVE-2023-38255 Medium 6.5 Socomec MOD3GP-SY-120K Cross-site Scripting 0.4%
  • CVE-2023-38582 Medium 6.3 Socomec MOD3GP-SY-120K Cross-site Scripting 0.5%
  • CVE-2023-39446 High 8.9 Socomec MOD3GP-SY-120K Cross-Site Request Forgery 0.3%
  • CVE-2023-39452 High 7.5 Socomec MOD3GP-SY-120K Plaintext Storage of a Password 0.6%
  • CVE-2023-40221 High 8.8 Socomec MOD3GP-SY-120K Code Injection 0.6%
  • CVE-2023-41084 Critical 10.0 Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking 0.7%
  • CVE-2023-41965 High 7.5 Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information 0.6%
  • CVE-2023-0356 Medium 5.7 SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information. 0.5%