CVE-2024-53684

High · 8.8

CVSS

8.8

EPSS

0.2%

Published

Dec 1, 2025

CISA due date

—

The record

A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted HTTP request can lead to unauthorized access. An attacker can stage a malicious webpage to trigger this vulnerability.

Affected packages

Ecosystem	Package	Introduced	Fixed