A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to unauthorized access. An atta…

高危 CVSS 7.5

CVECVE-2024-53684

首次发现2026-09-26 22:16 UTC

披露时间2025-12-01 16:15 UTC

最后更新2026-09-26 22:16 UTC

通道状态auto

摘要

A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious webpage to trigger this vulnerability.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

受影响产品

数据来源

NVD DATABASE

原始链接

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2116 Vendor Advisory
https://www.socomec.fr/sites/default/files/2025-10/CVE-2024-53684---Diris-Digiware-Mxx-Dxx-_VULNERABILITIES_2025-10-01-16-43-14_English_0.pdf Vendor Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2116 Vendor Advisory

时间线

2026-09-26 nvd_ingest NVD