Digi International Digi Portserver TS vulnerabilities
3 vulnerabilities
Known vulnerabilities in Digi International Digi Portserver TS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-3659digi internationaldigi one iap+2
EPSS score0.32%
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families:
* Digi PortServer TS - prior to and including 82000747_AA, build date 06/17/2022
* Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774_Z, build date 10/19/2020
* Digi One IAP – prior to and including 82000770 Z, build date 10/19/2020
A specially crafted POST request to the device’s web interface may allow an unauthenticated attacker to modify configuration settings.CVE-2026-12948digi internationaldigi one ia+3EPSS score0.42%
A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79).CVE-2023-4299digi internationaldigi cm console server+39EPSS score0.68%
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.