Digi International Digi One SP IA vulnerabilities

2 vulnerabilities

Known vulnerabilities in Digi International Digi One SP IA, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2026-12948digi internationaldigi one ia+3
EPSS score
0.42%
A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79).9CVE-2023-4299digi internationaldigi cm console server+39
EPSS score
0.68%
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.