Known vulnerabilities in DIRIS Digiware M-70

Vendor: Socomec
Software: DIRIS Digiware M-70
Software CPE: cpe:2.3:h:socomec:diris_digiware_m-70:*:*:*:*:*:*:*:*
Website: https://www.socomec.com/Home_en.html
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DIRIS Digiware M-70 DIRIS Digiware M-70 is affected by 13 known vulnerabilities: 10 medium, 1 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118984 - Missing Authentication for Critical Function
CVE-2025-20085		 CWE-306 Medium
No
No
 - 02.12.2025 SB2025120218
#VU118983 - Memory corruption
CVE-2025-26858		 CWE-119 Medium
No
No
 - 02.12.2025 SB2025120218
#VU118982 - Missing Authentication for Critical Function
CVE-2025-23417		 CWE-306 Medium
No
No
 - 02.12.2025 SB2025120218
#VU118981 - Missing Authentication for Critical Function
CVE-2025-55221		 CWE-306 Medium
No
No
 - 02.12.2025 SB2025120218
#VU118980 - Missing Authentication for Critical Function
CVE-2025-55222		 CWE-306 Medium
No
No
 - 02.12.2025 SB2025120218
#VU118979 - Cleartext Transmission of Sensitive Information
CVE-2024-48894		 CWE-319 Medium
No
No
 - 02.12.2025 SB2025120218
#VU118978 - Missing Authentication for Critical Function
CVE-2024-49572		 CWE-306 Medium
No
No
 - 02.12.2025 SB2025120218
#VU118975 - Missing Authentication for Critical Function
CVE-2025-54851		 CWE-306
No
No
 - 02.12.2025 SB2025120218
#VU118974 - Missing Authentication for Critical Function
CVE-2025-54850		 CWE-306
No
No
 - 02.12.2025 SB2025120218
#VU118973 - Missing Authentication for Critical Function
CVE-2025-54849		 CWE-306 Medium
No
No
 - 02.12.2025 SB2025120218
#VU118972 - Missing Authentication for Critical Function
CVE-2025-54848		 CWE-306 Medium
No
No
 - 02.12.2025 SB2025120218
#VU118971 - Cross-Site Request Forgery (CSRF)
CVE-2024-53684		 CWE-352 Low
No
No
 - 02.12.2025 SB2025120218
#VU118970 - Missing Authentication for Critical Function
CVE-2024-48882		 CWE-306 Medium
No
No
 - 02.12.2025 SB2025120218