CVE-2024-48894 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to…
Medium CVSS: 5.9

CVE-2024-48894

A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.
Vendor
Socomec
Product
Diris M-70 Firmware
CWE
CWE-319
Yayın Tarihi
2025-12-01 16:15:50
Güncelleme
2025-12-05 21:10:30
Source Identifier
talos-cna@cisco.com
KEV Date Added
-

Kategoriler

CWE-319 Diris M-70 Firmware MEDIUM Socomec 2025

Referanslar

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2115 https://www.socomec.fr/sites/default/files/2025-04/CVE-2024-48894---Diris-Digiware-Webview-_VULNERABILITIES_2025-04-11-17-22-18_English_0.pdf https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2115