CVEvulnerability

CVE-2024-50628

8.8 HIGH Published 2024-12-09 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2024-12-09
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-862

Description

An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues.

Affected configurations

• digi connectport lts firmware (< 1.4.12)

Weakness · CWE (1)

CWE-862 Missing Authorization weakness

References

https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf Vendor Advisory
https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf Product
https://www.digi.com/resources/security Vendor Advisory

CVE-2024-50628

Description

Affected configurations

Related

Weakness · CWE (1)

References