What is the CVSS score of EUVD-2024-55110?

EUVD-2024-55110 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Diris M 70 Firmware are affected by EUVD-2024-55110?

A high-severity denial of service vulnerability in Socomec DIRIS Digiware M-70 devices allows unauthenticated attackers to disrupt critical power distribution monitoring systems with a single crafted…

How to fix or mitigate EUVD-2024-55110?

Within 24 hours: Identify all DIRIS M-70 devices running version 1.6.9 and document their network location and business criticality. Within 7 days: Implement network segmentation to restrict Modbus TCP access to authorized management networks only, and enable detailed logging of Modbus communications. Within 30 days: Contact Socomec for patch availability and upgrade timelines; evaluate alternative power monitoring solutions if patches remain unavailable.

Diris M 70 Firmware EUVD-2024-55110

| CVE-2024-48882 HIGH

Missing Authentication for Critical Function (CWE-306)

2025-12-01 talos-cna@cisco.com

Authentication Bypass Denial Of Service Diris M 70 Firmware

8.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.6 HIGH

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 13:34 euvd

EUVD-2024-55110

Analysis Generated

Mar 15, 2026 - 13:34 vuln.today

CVE Published

Dec 01, 2025 - 16:15 nvd

HIGH 8.6

DescriptionCVE.org

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.

Analysis

Technical ContextAI

An authentication bypass vulnerability allows attackers to circumvent login mechanisms and gain unauthorized access without valid credentials. This vulnerability is classified as Missing Authentication for Critical Function (CWE-306).

RemediationAI

Implement robust authentication mechanisms. Use multi-factor authentication. Review authentication logic for bypass conditions. Remove default credentials.