A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to unauthorized access. An atta…

High CVSS 7.5

CVECVE-2024-53684

First seen2026-09-26 22:16 UTC

Disclosed2025-12-01 16:15 UTC

Last updated2026-09-26 22:16 UTC

Channel statusauto

Summary

A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious webpage to trigger this vulnerability.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2116 Vendor Advisory
https://www.socomec.fr/sites/default/files/2025-10/CVE-2024-53684---Diris-Digiware-Mxx-Dxx-_VULNERABILITIES_2025-10-01-16-43-14_English_0.pdf Vendor Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2116 Vendor Advisory

Timeline

2026-09-26 nvd_ingest NVD