What is the CVSS score of EUVD-2025-200031?

EUVD-2025-200031 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Diris M 70 Firmware are affected by EUVD-2025-200031?

A high-severity denial-of-service vulnerability in Socomec DIRIS Digiware M-70 devices can be triggered remotely without authentication, potentially disrupting critical power distribution monitoring…

How to fix or mitigate EUVD-2025-200031?

Within 24 hours: Inventory all Socomec DIRIS Digiware M-70 version 1.6.9 devices and document their criticality and network accessibility. Within 7 days: Implement network segmentation to restrict unauthenticated access to port 503 on affected devices; deploy network monitoring to detect suspicious Modbus TCP Write Single Register function code 6 messages targeting register 4352. Within 30 days: Contact Socomec for patch availability and timeline; evaluate upgrade feasibility to a patched version or replacement hardware; conduct full security assessment of Modbus network architecture.

Diris M 70 Firmware EUVD-2025-200031

| CVE-2025-54851 HIGH

Missing Authentication for Critical Function (CWE-306)

2025-12-01 talos-cna@cisco.com

Authentication Bypass Denial Of Service Diris M 70 Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 13:34 euvd

EUVD-2025-200031

Analysis Generated

Mar 15, 2026 - 13:34 vuln.today

CVE Published

Dec 01, 2025 - 16:15 nvd

HIGH 7.5

DescriptionCVE.org

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.An attacker can trigger this denial-of-service condition by sending a single Modbus TCP message to port 503 using the Write Single Register function code (6) to write the value 1 to register 4352. This action changes the Modbus address to 15. After this message is sent, the device will be in a denial-of-service state.

Analysis

Technical ContextAI

An authentication bypass vulnerability allows attackers to circumvent login mechanisms and gain unauthorized access without valid credentials. This vulnerability is classified as Missing Authentication for Critical Function (CWE-306).

RemediationAI

Implement robust authentication mechanisms. Use multi-factor authentication. Review authentication logic for bypass conditions. Remove default credentials.