← Back

CVE-2024-50626

nvd nist
Published: Dec 9, 2024Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data.

Affected (1)

Digi
1 product
Connectport Lts Firmware
Configuration A
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Connectport Lts Firmware
Before 1.4.12
Running on/withPlatform Versions
Digi
Connectport Lts 16
All versions
Digi
Connectport Lts 16 Mei
All versions
Digi
Connectport Lts 16 Mei 2ac
All versions
Digi
Connectport Lts 32
All versions
Digi
Connectport Lts 32 Mei
All versions
Digi
Connectport Lts 8 Mei
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (3)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Product
Source: cve@mitre.org
Vendor Advisory

Timeline

No history available yet.