Socomec DIRIS Digiware M series and Easy Config, PDF XChange Editor vulnerabilities

Cisco Talos disclosed and documented multiple patched vulnerabilities in PDF XChange Editor and Socomec DIRIS Digiware M series / Easy Config, including an out-of-bounds read leading to possible sensitive data disclosure, several denial-of-service and buffer overflow issues (including Modbus-related impacts), CSRF, cleartext transmission, and an authentication bypass; vendors have issued fixes and Snort rules are available to detect exploitation.