8.8

CVE-2024-50628

An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues.

Data is provided by the National Vulnerability Database (NVD)
Digi ≫ Connectport Lts Firmware Version < 1.4.12
   Digi ≫ Connectport Lts 16 Version-
   Digi ≫ Connectport Lts 16 Mei Version-
   Digi ≫ Connectport Lts 16 Mei 2ac Version-
   Digi ≫ Connectport Lts 32 Version-
   Digi ≫ Connectport Lts 32 Mei Version-
   Digi ≫ Connectport Lts 8 Mei Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.18% 0.405
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.