Filtered by vendor Digi Subscriptions
Total 25 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-6973 1 Digi 3 Connectport Lts 32 Mei, Connectport Lts 32 Mei Bios, Connectport Lts 32 Mei Firmware 2024-11-21 6.2 Medium
Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cross-site scripting vulnerabilities exist that could allow an attacker to cause a denial-of-service condition.
CVE-2020-12878 1 Digi 2 Connectport X2e, Connectport X2e Firmware 2024-11-21 7.8 High
Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /etc/init.d/S50dropbear.sh and the /WEB/python/.ssh directory.
CVE-2019-18859 1 Digi 2 Anywhereusb\/14, Anywhereusb\/14 Firmware 2024-11-21 6.1 Medium
Digi AnywhereUSB 14 allows XSS via a link for the Digi Page.
CVE-2018-20162 1 Digi 2 Transport Lr54, Transport Lr54 Firmware 2024-11-21 N/A
Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root.
CVE-2017-18868 1 Digi 2 Xbee 2, Xbee 2 Firmware 2024-11-21 7.7 High
Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon which the ZigBee protocol is built.