Vendor

    Digi

    25 known vulnerabilities in products by Digi, 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Digi
    CriticalCVE-2018-20162

    Digi Transport Lr54 Firmware: Improper Input Validation

    9.9
    CriticalCVE-2021-35978

    Digi Transport Wr41 Firmware: Code Execution

    9.8
    MediumCVE-2020-10136

    IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

    also in 6 other products

    5.3
    CriticalCVE-2021-35977

    Digi Realport: Buffer Overflow

    9.8
    HighCVE-2022-26952

    Digi Passport Firmware: Buffer Overflow

    7.5
    CriticalCVE-2021-38412

    Digi PortServer TS 16 Improper Authentication

    also in 1 other product

    9.6
    HighCVE-2022-26953

    Digi Passport Firmware: Buffer Overflow

    7.5
    MediumCVE-2019-18859

    Digi Anywhereusb\/14 Firmware: Cross-Site Scripting (XSS)

    6.1
    CriticalCVE-2022-2634

    Digi ConnectPort X2D

    10.0
    CriticalCVE-2021-36767

    Digi Realport: security vulnerability

    9.8
    CriticalCVE-2023-4299

    Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

    also in 1 other product

    9.0
    HighCVE-2021-35979

    Digi Realport: security vulnerability

    8.1
    HighCVE-2024-50626

    Digi Connectport Lts Firmware: Path Traversal

    8.8
    Not ratedCVE-2004-1973

    DiGi DiGi WWW Server: Denial of Service

    —
    HighCVE-2024-50628

    Digi Connectport Lts Firmware: Remote Code Execution

    8.8
    HighCVE-2017-18868

    Digi Xbee 2 Firmware: security vulnerability

    7.7
    HighCVE-2021-37188

    Digi Transport Wr41 Firmware: security vulnerability

    8.8
    MediumCVE-2020-6973

    Digi International ConnectPort LTS 32 MEI: Cross-site Scripting

    6.2
    HighCVE-2021-37189

    Digi Transport Wr11 Firmware: security vulnerability

    7.5
    HighCVE-2024-50627

    Digi Connectport Lts Firmware: Privilege Escalation

    8.8
    MediumCVE-2021-37187

    Digi Transport Wr41 Firmware: security vulnerability

    6.5
    HighCVE-2020-12878

    Digi Connectport X2e Firmware: Privilege Escalation

    7.8
    HighCVE-2024-50625

    Digi Connectport Lts Firmware: Unrestricted File Upload

    8.0
    MediumCVE-2020-6975

    Digi International ConnectPort LTS 32 MEI: Unrestricted Upload of File with Dangerous Type

    4.9
    MediumCVE-2020-8822

    Digi Transport Wr44 Firmware: Cross-Site Scripting (XSS)

    4.8

    Products