CVE-2024-50627

HIGH

Digi ConnectPort LTS Firmware < 1.4.12 - Privilege Escalation via File Upload

Title source: llm
STIX 2.1

Description

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentially leading to unauthorized system access.

References (3)

Core 3

Scores

CVSS v3 8.8
EPSS 0.0032
EPSS Percentile 23.0%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-552
Status published
Products (1)
digi/connectport_lts_firmware < 1.4.12
Published Dec 09, 2024
Tracked Since Feb 18, 2026