CVE-2024-50627
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Description
An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentially leading to unauthorized system access.
Affected (1)
Products: Digi: Connectport Lts Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4.12 |
| Running on/with | Platform Versions |
|---|---|
Digi Connectport Lts 16 | All versions |
Digi Connectport Lts 16 Mei | All versions |
Digi Connectport Lts 16 Mei 2ac | All versions |
Digi Connectport Lts 32 | All versions |
Digi Connectport Lts 32 Mei | All versions |
Digi Connectport Lts 8 Mei | All versions |
References (3)
Source: cve@mitre.org
Vendor Advisory
Timeline
No history available yet.