Browse CVEs

HIGH 8.8 CVE-2024-50626 An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the lo… Connectport Lts Firmware 1.4.12+ Fix from $1,9502024-12-09 HIGH 8.8 CVE-2024-50627 An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an a… Connectport Lts Firmware 1.4.12+ Fix from $1,9502024-12-09 HIGH 8.8 CVE-2024-50628 An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unautho… Connectport Lts Firmware 1.4.12+ Fix from $1,9502024-12-09 HIGH 8.0 CVE-2024-50625 An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation o… Connectport Lts Firmware 1.4.12+ Fix from $1,9502024-12-09 HIGH 8.1 CVE-2023-4299 Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment. Realport 1.4.9 / 2.26.2.4+ Fix from $1,9502023-08-31 CRITICAL 9.8 CVE-2022-2634 An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web applicati… Connectport X2d Firmware 2020-01-01+ Fix from $2,3002022-08-10 HIGH 7.5 CVE-2022-26952 Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unauthenticat… Passport Firmware after 1.5.1.1 Fix from $1,9502022-04-06 HIGH 7.5 CVE-2022-26953 Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoin… Passport Firmware after 1.5.1.1 Fix from $1,9502022-04-06 CRITICAL 9.8 CVE-2021-35978 An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges.… Transport Dr64 Firmware after 8.3.1.2 Fix from $2,3002021-12-10 HIGH 8.8 CVE-2021-37188 An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader … Transport Dr64 Firmware after 8.3.1.2 Fix from $1,9502021-12-10 HIGH 7.5 CVE-2021-37189 An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessi… Transport Wr11 Firmware 6.0.0.0+ Fix from $1,9502021-12-10 MEDIUM 6.5 CVE-2021-37187 An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) … Transport Dr64 Firmware after 8.3.1.2 Fix from $1,6002021-12-10 CRITICAL 9.8 CVE-2021-36767 In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the prote… Realport after 4.10.490 Fix from $2,3002021-10-08 CRITICAL 9.8 CVE-2021-35977 An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages.… Realport after 4.8.488.0 Fix from $2,3002021-10-08 HIGH 8.1 CVE-2021-35979 An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform auth… Realport after 4.8.488.0 Fix from $1,9502021-10-08 CRITICAL 9.8 CVE-2021-38412 Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require auth… Portserver Ts 16 Firmware Mitigation only Fix from $2,3002021-09-17 HIGH 7.8 CVE-2020-12878 Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, rel… Connectport X2e Firmware 3.2.30.6+ Fix from $1,9502021-02-18 HIGH 7.7 CVE-2017-18868 Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon whi… Xbee 2 Firmware Mitigation only Fix from $1,9502020-05-21 MEDIUM 6.2 CVE-2020-6973 Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cross-site scripting vulnerabil… Connectport Lts 32 Mei Bios No fix yet Fix from $1,6002020-02-13 MEDIUM 6.1 CVE-2019-18859 Digi AnywhereUSB 14 allows XSS via a link for the Digi Page. Anywhereusb\/14 Firmware No fix yet Fix from $1,6002020-01-09 CRITICAL 9.9 CVE-2018-20162 Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypa… Transport Lr54 Firmware 4.4.0.26+ Fix from $2,3002019-03-21 MEDIUM 5.0 CVE-2004-1973 DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (sla… Www Server Patch available Fix from $1,6002004-04-27