CVE-2024-50627

Katalog CVE

CVSS 8.8 · High EPSS 0,33%

Kerentanan Files or Directories Accessible to External Parties pada digi connectport lts firmware. Skor CVSS 3.1 8.8 (High) menurut CISA ADP.

Deskripsi (NVD)

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentially leading to unauthorized system access.

Rincian

Terbit di NVD

9 Desember 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber CISA ADP
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-552: Files or Directories Accessible to External Parties

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-... advisory vendor
• https://www.digi.com/resources/security advisory vendor
• https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf product