CVE-2022-2634

Published: Aug 10, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.

Affected (1)

Products: Digi: Connectport X2d Firmware

Digi

1 product

Connectport X2d Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Digi Connectport X2d Firmware	Before 2020-01-01

Running on/with	Platform Versions
Digi Connectport X2d	All versions

Related CWEs

CWE-250

Execution with Unnecessary Privileges

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.