“Good enough” emulation: Fuzzing a single thread to uncover vulnerabilities
Summary: Cisco Talos emulated only the Modbus protocol-handling thread of the Socomec DIRIS M-70 gateway, using the Unicorn Engine and AFL fuzzing, after code read-out protection (RDP Level 1) on the STM32 microcontroller blocked JTAG debugging. The campaign found multiple Modbus messages causing denial of service and produced six CVEs (CVE-2025-54848 through CVE-2025-54851 and CVE-2025-55221, CVE-2025-55222), all reported to the manufacturer and patched.
What you should know: The M-70 is an IIoT gateway used in critical infrastructure, data centers, and healthcare, and its Modbus thread alone supports over 700 unique message types - a single-thread emulation effort was enough to surface six denial-of-service vulnerabilities in that surface.
Read the original at Cisco Talos ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026