CVE-2024-48894

Summary

A cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.

Affected Software

Weaknesses

• CWE-319: CWE-319: Cleartext Transmission of Sensitive Information

ADP Enrichment

CVE Program Container

Additional References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2115

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2115
• https://www.socomec.fr/sites/default/files/2025-04/CVE-2024-48894—Diris-Digiware-Webview-_VULNERABILITIES_2025-04-11-17-22-18_English_0.pdf

• ←Previous
• Next→