Digi Passport vulnerabilities

3 vulnerabilities

Known vulnerabilities in Digi Passport, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2022-26952digipassport_firmware
EPSS score
2.09%
Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unauthenticated user is redirected to the authentication page.7.5CVE-2022-26953digipassport_firmware
EPSS score
1.79%
Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowing him to force an overflow when the string is concatenated to the HTML body.9CVE-2023-4299digi internationaldigi cm console server+39
EPSS score
0.68%
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.