Digi International vulnerabilities
6 vulnerabilities
Known vulnerabilities in Digi International products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 39 products.
Products
39- Digi Portserver TS3 vulnerabilities
- Digi One IA2 vulnerabilities
- Digi One SP2 vulnerabilities
- Digi One SP IA2 vulnerabilities
- Anywhereusb Plus Family1 vulnerabilities
- Connect EZ Family1 vulnerabilities
- Connect IT Family1 vulnerabilities
- Digi 54Xx Family1 vulnerabilities
- Digi 63Xx Family1 vulnerabilities
- Digi CM Console Server1 vulnerabilities
- Digi Connect ES1 vulnerabilities
- Digi Connect SP1 vulnerabilities
- Digi Connectport LTS 8/16/321 vulnerabilities
- Digi Connectport TS 8/161 vulnerabilities
- Digi IX141 vulnerabilities
- Digi LR54 Family1 vulnerabilities
- Digi One IAP1 vulnerabilities
- Digi One IAP Family1 vulnerabilities
- Digi One SP / SP IA / IA1 vulnerabilities
- Digi One Sp/Digi One SP Ia/Digi One IA1 vulnerabilities
- Digi Passport Console Server1 vulnerabilities
- Digi Portserver TS M MEI1 vulnerabilities
- Digi Portserver TS MEI1 vulnerabilities
- Digi Portserver TS MEI Hardened1 vulnerabilities
- Digi Portserver TS P MEI1 vulnerabilities
- Digi Realport1 vulnerabilities
- Digi WR11 XT1 vulnerabilities
- Digi WR211 vulnerabilities
- Digi WR311 vulnerabilities
- Digi WR44 R1 vulnerabilities
- EX Family1 vulnerabilities
- IX Family1 vulnerabilities
- Portserver TS 1/2/41 vulnerabilities
- Portserver TS 161 vulnerabilities
- TX Family1 vulnerabilities
- Xbee Hive Border Router For Wi SUN1 vulnerabilities
- Xbee Hive Gateway1 vulnerabilities
- Digi 6350 SR0 vulnerabilities
- Digi Connectcore 8X Products0 vulnerabilities
CVE-2021-38412digi internationalportserver ts 16+1
EPSS score1.34%
Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to achieve further control in.CVE-2025-3659digi internationaldigi one iap+2EPSS score0.32%
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families:
* Digi PortServer TS - prior to and including 82000747_AA, build date 06/17/2022
* Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774_Z, build date 10/19/2020
* Digi One IAP – prior to and including 82000770 Z, build date 10/19/2020
A specially crafted POST request to the device’s web interface may allow an unauthenticated attacker to modify configuration settings.CVE-2026-75937digi internationalanywhereusb plus family+11EPSS score0.53%
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device.CVE-2026-12352digi internationaldigi one sp / sp ia / ia+1EPSS score0.40%
This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device.CVE-2026-12948digi internationaldigi one ia+3EPSS score0.42%
A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79).CVE-2023-4299digi internationaldigi cm console server+39EPSS score0.68%
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.