# cve.now: Socomec

The newest entries naming Socomec as an affected vendor (up to 200), of 25 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-2491](https://cve.now/CVE-2026-2491.md): Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability (CVSS 6.3)
- [CVE-2024-48894](https://cve.now/CVE-2024-48894.md): A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 5.9)
- [CVE-2024-53684](https://cve.now/CVE-2024-53684.md): A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 7.5)
- [CVE-2024-45370](https://cve.now/CVE-2024-45370.md): An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2.6.1.0. (CVSS 7.3)
- [CVE-2024-49572](https://cve.now/CVE-2024-49572.md): A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 7.2)
- [CVE-2024-48882](https://cve.now/CVE-2024-48882.md): A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 8.6)
- [CVE-2025-20085](https://cve.now/CVE-2025-20085.md): A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 7.2)
- [CVE-2025-23417](https://cve.now/CVE-2025-23417.md): A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 8.6)
- [CVE-2025-26858](https://cve.now/CVE-2025-26858.md): A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 8.6)
- [CVE-2025-54851](https://cve.now/CVE-2025-54851.md): A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 7.5)
- [CVE-2025-54850](https://cve.now/CVE-2025-54850.md): A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 7.5)
- [CVE-2025-54849](https://cve.now/CVE-2025-54849.md): A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 7.5)
- [CVE-2025-54848](https://cve.now/CVE-2025-54848.md): A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. (CVSS 7.5)
- [CVE-2025-55222](https://cve.now/CVE-2025-55222.md): A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 (CVSS 8.6)
- [CVE-2025-55221](https://cve.now/CVE-2025-55221.md): A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 (CVSS 8.6)
- [CVE-2024-4601](https://cve.now/CVE-2024-4601.md): Improper Authentication vulnerability in Socomec Net Vision (CVSS 6.7)
- [CVE-2024-4600](https://cve.now/CVE-2024-4600.md): Cross-Site Request Forgery vulnerability in Socomec Net Vision (CVSS 7.1)
- [CVE-2023-38255](https://cve.now/CVE-2023-38255.md): Socomec MOD3GP-SY-120K Cross-site Scripting (CVSS 6.5)
- [CVE-2023-38582](https://cve.now/CVE-2023-38582.md): Socomec MOD3GP-SY-120K Cross-site Scripting (CVSS 6.3)
- [CVE-2023-39446](https://cve.now/CVE-2023-39446.md): Socomec MOD3GP-SY-120K Cross-Site Request Forgery (CVSS 8.9)
- [CVE-2023-39452](https://cve.now/CVE-2023-39452.md): Socomec MOD3GP-SY-120K Plaintext Storage of a Password (CVSS 7.5)
- [CVE-2023-40221](https://cve.now/CVE-2023-40221.md): Socomec MOD3GP-SY-120K Code Injection (CVSS 8.8)
- [CVE-2023-41084](https://cve.now/CVE-2023-41084.md): Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking (CVSS 10.0)
- [CVE-2023-41965](https://cve.now/CVE-2023-41965.md): Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information (CVSS 7.5)
- [CVE-2023-0356](https://cve.now/CVE-2023-0356.md): SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in thre (CVSS 5.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/socomec
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.