Socomec DIRIS Digiware M series and Easy Config, PDF XChange Editor vulnerabilities

Summary: Cisco Talos disclosed an out-of-bounds read vulnerability, TALOS-2025-2280 (CVE-2025-58113), in the EMF functionality of PDF-XChange Editor 10.7.3.401, patched in version 10.7.5.403, and ten vulnerabilities in Socomec DIRIS Digiware M series and Easy Config products, including nine in DIRIS Digiware M-70 version 1.6.9. The Socomec issues include cleartext transmission (CVE-2024-48894), cross-site request forgery (CVE-2024-53684), an authentication bypass via a crafted database record (CVE-2024-45370), a Modbus TCP buffer overflow (CVE-2025-26858), and multiple denial-of-service flaws triggerable by unauthenticated packets, two of which can weaken credentials so default documented credentials are applied to the device.
What's compelling: Several of the Socomec flaws need only an unauthenticated packet, and two of them can push a gateway back to default documented credentials - the same credentials an attacker already knows.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-48882 CVE-2024-48894 CVE-2024-49572 CVE-2024-53684 CVE-2025-20085 CVE-2025-23417 CVE-2025-26858 CVE-2025-54848 CVE-2025-54851 CVE-2025-55221 CVE-2025-55222 CVE-2025-58113
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026