Digi International Vulnerabilities and Affected Products
Vulnerabilities associated with Digi One IAP.
Products
Clear product- Digi PortServer TS3 vulnerabilities
- Digi One IA2 vulnerabilities
- Digi One SP IA2 vulnerabilities
- Digi 6350-SR1 vulnerability
- Digi CM Console Server1 vulnerability
- Digi Connect ES1 vulnerability
- Digi Connect SP1 vulnerability
- Digi ConnectCore 8X products1 vulnerability
- Digi ConnectPort LTS 8/16/321 vulnerability
- Digi ConnectPort TS 8/161 vulnerability
- Digi One IAP1 vulnerability
- Digi One IAP Family1 vulnerability
- Digi One SP1 vulnerability
- Digi One SP / SP IA / IA1 vulnerability
- Digi One SP/Digi One SP IA/Digi One IA1 vulnerability
- Digi Passport Console Server1 vulnerability
- Digi PortServer TS M MEI1 vulnerability
- Digi PortServer TS MEI1 vulnerability
- Digi PortServer TS MEI Hardened1 vulnerability
- Digi PortServer TS P MEI1 vulnerability
- Digi RealPort1 vulnerability
- Digi WR11 XT1 vulnerability
- Digi WR211 vulnerability
- Digi WR311 vulnerability
- Digi WR44 R1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-3659CRITICAL | Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAPImproper authentication handling was identified in a set of HTTP POST requests affecting the following product families: * Digi PortServer TS - prior to and including 82000747_AA, build date 06/17/2022 * Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774_Z, build date 10/19/2020 * Digi One IAP – prior to and including 82000770 Z, build date 10/19/2020 A specially crafted POST request to the device’s web interface may allow an unauthenticated attacker to m… CWE-287May 12, 2025 | CVSS9.4v4.0 | EPSS0.307% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |