İçeriğe atla
Noroxi

Digi kayıtları

digi üreticisine ait 25 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

25 kayıt
  • CVE-2018-20162
    40Planlayın

    Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privilege

    KritikCVSS 9,9Kavram kanıtıEPSS %4

    digi · transport lr54 firmware21 Mar 2019

  • CVE-2021-35978
    40Planlayın

    An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR.

    KritikCVSS 9,8İstismar yokEPSS %4

    digi · transport dr64 firmware10 Ara 2021

  • CVE-2021-35977
    39İzleyin

    An issue was discovered in Digi RealPort for Windows through 4.8.488.0.

    KritikCVSS 9,8İstismar yokEPSS %2

    digi · realport8 Eki 2021

  • CVE-2021-38412
    39İzleyin

    Digi PortServer TS 16 Improper Authentication

    KritikCVSS 9,8İstismar yokEPSS %1

    digi · portserver ts 16 firmware17 Eyl 2021

  • CVE-2022-2634
    39İzleyin

    Digi ConnectPort X2D

    KritikCVSS 9,8İstismar yokEPSS %1

    digi · connectport x2d firmware10 Ağu 2022

  • CVE-2021-36767
    39İzleyin

    In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making

    KritikCVSS 9,8İstismar yokEPSS %1

    digi · realport8 Eki 2021

  • CVE-2024-50626
    35İzleyin

    An issue was discovered in Digi ConnectPort LTS before 1.4.12.

    YüksekCVSS 8,8İstismar yokEPSS %1

    digi · connectport lts firmware9 Ara 2024

  • CVE-2024-50628
    35İzleyin

    An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12.

    YüksekCVSS 8,8İstismar yokEPSS %0

    digi · connectport lts firmware9 Ara 2024

  • CVE-2021-37188
    35İzleyin

    An issue was discovered on Digi TransPort devices through 2021-07-21.

    YüksekCVSS 8,8İstismar yokEPSS %0

    digi · transport dr64 firmware10 Ara 2021

  • CVE-2024-50627
    35İzleyin

    An issue was discovered in Digi ConnectPort LTS before 1.4.12.

    YüksekCVSS 8,8İstismar yokEPSS %0

    digi · connectport lts firmware9 Ara 2024

  • CVE-2021-35979
    32İzleyin

    An issue was discovered in Digi RealPort through 4.8.488.0.

    YüksekCVSS 8,1İstismar yokEPSS %1

    digi · realport8 Eki 2021

  • CVE-2023-4299
    32İzleyin

    Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

    YüksekCVSS 8,1İstismar yokEPSS %1

    digi · realport31 Ağu 2023

  • CVE-2024-50625
    32İzleyin

    An issue was discovered in Digi ConnectPort LTS before 1.4.12.

    YüksekCVSS 8,0İstismar yokEPSS %0

    digi · connectport lts firmware9 Ara 2024

  • CVE-2022-26952
    31İzleyin

    Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unau

    YüksekCVSS 7,5İstismar yokEPSS %2

    digi · passport firmware5 Nis 2022

  • CVE-2022-26953
    31İzleyin

    Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow.

    YüksekCVSS 7,5İstismar yokEPSS %2

    digi · passport firmware5 Nis 2022

  • CVE-2020-12878
    31İzleyin

    Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses c

    YüksekCVSS 7,8İstismar yokEPSS %1

    digi · connectport x2e firmware17 Şub 2021

  • CVE-2020-10136
    30İzleyin

    IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

    OrtaCVSS 5,3Kavram kanıtıEPSS %29

    cisco · nx-os2 Haz 2020

  • CVE-2017-18868
    30İzleyin

    Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack

    YüksekCVSS 7,7İstismar yokEPSS %1

    digi · xbee 2 firmware21 May 2020

  • CVE-2021-37189
    30İzleyin

    An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4.

    YüksekCVSS 7,5İstismar yokEPSS %1

    digi · transport wr11 firmware10 Ara 2021

  • CVE-2021-37187
    26İzleyin

    An issue was discovered on Digi TransPort devices through 2021-07-21.

    OrtaCVSS 6,5İstismar yokEPSS %1

    digi · transport dr64 firmware10 Ara 2021

  • CVE-2019-18859
    25İzleyin

    Digi AnywhereUSB 14 allows XSS via a link for the Digi Page.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    digi · anywhereusb\/14 firmware9 Oca 2020

  • CVE-2020-6973
    24İzleyin

    Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2.

    OrtaCVSS 6,2İstismar yokEPSS %1

    digi · connectport lts 32 mei bios12 Şub 2020

  • CVE-2004-1973
    21İzleyin

    DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number

    OrtaCVSS 5,0Kavram kanıtıEPSS %4

    digi · www server27 Nis 2004

  • CVE-2020-6975
    19İzleyin

    Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2.

    OrtaCVSS 4,9İstismar yokEPSS %1

    digi · connectport lts 32 mei bios12 Şub 2020

  • CVE-2020-8822
    19İzleyin

    Digi TransPort WR21 5.2.2.3, WR44 5.1.6.4, and WR44v2 5.1.6.9 devices allow stored XSS in the web application.

    OrtaCVSS 4,8İstismar yokEPSS %1

    digi · transport wr21 firmware9 Şub 2020