Skip to content
Noroxi

Socomec records

26 published records for vendor socomec.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

26 records
  • CVE-2019-15859
    48Plan

    Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a devi

    CriticalCVSS 9.8Proof of conceptEPSS 31%

    socomec · diris a-40 firmwareOct 9, 2019

  • CVE-2023-41084
    39Monitor

    Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking

    CriticalCVSS 9.8No exploitEPSS 0%

    socomec · modulys gp firmwareSep 18, 2023

  • CVE-2021-41870
    35Monitor

    An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4.

    HighCVSS 8.8No exploitEPSS 1%

    socomec · remote view pro firmwareDec 15, 2021

  • CVE-2023-40221
    35Monitor

    Socomec MOD3GP-SY-120K Code Injection

    HighCVSS 8.8No exploitEPSS 0%

    socomec · modulys gp firmwareSep 18, 2023

  • CVE-2024-53684
    35Monitor

    A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9.

    HighCVSS 8.8No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2023-39446
    35Monitor

    Socomec MOD3GP-SY-120K Cross-Site Request Forgery

    HighCVSS 8.8No exploitEPSS 0%

    socomec · modulys gp firmwareSep 18, 2023

  • CVE-2024-48894
    30Monitor

    A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9.

    HighCVSS 7.5No exploitEPSS 1%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2025-26858
    30Monitor

    A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

    HighCVSS 7.5No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2023-41965
    30Monitor

    Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information

    HighCVSS 7.5No exploitEPSS 0%

    socomec · modulys gp firmwareSep 18, 2023

  • CVE-2023-39452
    30Monitor

    Socomec MOD3GP-SY-120K Plaintext Storage of a Password

    HighCVSS 7.5No exploitEPSS 0%

    socomec · modulys gp firmwareSep 18, 2023

  • CVE-2024-48882
    30Monitor

    A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

    HighCVSS 7.5No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2025-23417
    30Monitor

    A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

    HighCVSS 7.5No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2023-0356
    30Monitor

    SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in thre

    HighCVSS 7.5No exploitEPSS 0%

    socomec · net visionJan 26, 2023

  • CVE-2025-54851
    30Monitor

    A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

    HighCVSS 7.5No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2025-55222
    30Monitor

    A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70

    HighCVSS 7.5No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2025-54848
    30Monitor

    A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

    HighCVSS 7.5No exploitEPSS 0%

    socomec · diris digiware m-70 firmwareDec 1, 2025

  • CVE-2025-55221
    30Monitor

    A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70

    HighCVSS 7.5No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2025-54850
    30Monitor

    A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

    HighCVSS 7.5No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2025-54849
    30Monitor

    A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

    HighCVSS 7.5No exploitEPSS 0%

    socomec · diris digiware m-70 firmwareDec 1, 2025

  • CVE-2024-4600
    28Monitor

    Cross-Site Request Forgery vulnerability in Socomec Net Vision

    HighCVSS 7.1No exploitEPSS 0%

    socomec · net visionMay 7, 2024

  • CVE-2024-49572
    26Monitor

    A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

    MediumCVSS 6.5No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2025-20085
    26Monitor

    A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9.

    MediumCVSS 6.5No exploitEPSS 0%

    socomec · diris m-70 firmwareDec 1, 2025

  • CVE-2024-4601
    26Monitor

    Improper Authentication vulnerability in Socomec Net Vision

    MediumCVSS 6.7No exploitEPSS 0%

    socomec · net visionMay 7, 2024

  • CVE-2023-38255
    24Monitor

    Socomec MOD3GP-SY-120K Cross-site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    socomec · modulys gp firmwareSep 18, 2023

  • CVE-2021-41871
    21Monitor

    An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4.

    MediumCVSS 5.4No exploitEPSS 0%

    socomec · remote view pro firmwareDec 15, 2021