Digi International Vulnerabilities and Affected Products
Vulnerabilities associated with Digi One IA.
Products
Clear product- Digi PortServer TS3 vulnerabilities
- Digi One IA2 vulnerabilities
- Digi One SP IA2 vulnerabilities
- Digi 6350-SR1 vulnerability
- Digi CM Console Server1 vulnerability
- Digi Connect ES1 vulnerability
- Digi Connect SP1 vulnerability
- Digi ConnectCore 8X products1 vulnerability
- Digi ConnectPort LTS 8/16/321 vulnerability
- Digi ConnectPort TS 8/161 vulnerability
- Digi One IAP1 vulnerability
- Digi One IAP Family1 vulnerability
- Digi One SP1 vulnerability
- Digi One SP / SP IA / IA1 vulnerability
- Digi One SP/Digi One SP IA/Digi One IA1 vulnerability
- Digi Passport Console Server1 vulnerability
- Digi PortServer TS M MEI1 vulnerability
- Digi PortServer TS MEI1 vulnerability
- Digi PortServer TS MEI Hardened1 vulnerability
- Digi PortServer TS P MEI1 vulnerability
- Digi RealPort1 vulnerability
- Digi WR11 XT1 vulnerability
- Digi WR211 vulnerability
- Digi WR311 vulnerability
- Digi WR44 R1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-12948MEDIUM | Stored Cross-Site Scripting (XSS)A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79). CWE-79Jul 7, 2026 | CVSS4.8v4.0 | EPSS0.269% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-4299CRITICAL | Digi RealPort Protocol Use of Password Hash Instead of Password for AuthenticationDigi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment. CWE-836Aug 31, 2023 | CVSS9.0v3.1 | EPSS0.55% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |