CVEvulnerability

CVE-2022-2634

9.8 CRITICAL Published 2022-08-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-250

Description

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.

Affected configurations

• digi connectport x2d firmware (< 2020-01-01)

Related

Weakness · CWE (1)

  • CWE-250 Execution with Unnecessary Privileges weakness

References