Passport Firmware

passport_firmware

Vendor: Digi • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4299 1Digi 20Cm Firmware Connect Es FirmwareConnect Sp Firmware+17 more Jun 17, 2026 Aug 31, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
CVE-2022-26953 1Digi 1Passport Firmware Jun 17, 2026 Apr 6, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowing him to force an overflow when the string is concatenated to...Show more Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowing him to force an overflow when the string is concatenated to the HTML body.Show less
CVE-2022-26952 1Digi 1Passport Firmware Jun 17, 2026 Apr 6, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unauthenticated user is redirected to the authentication page.