CVE-2024-50626

HIGH

Digi ConnectPort LTS Firmware < 1.4.12 - Path Traversal in WebFS

Title source: llm
STIX 2.1

Description

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data.

References (3)

Core 3

Scores

CVSS v3 8.8
EPSS 0.0051
EPSS Percentile 39.6%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-22
Status published
Products (1)
digi/connectport_lts_firmware < 1.4.12
Published Dec 09, 2024
Tracked Since Feb 18, 2026