Connectport LTS Firmware vulnerabilities
4 known vulnerabilities in Connectport LTS Firmware from Digi. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Connectport LTS Firmware: Missing Authorization
An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues.
- 8.8 High severity
Connectport LTS Firmware: Files or Directories Accessible to External Parties
An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentiall
- 8.8 High severity
Connectport LTS Firmware: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access
- 8.0 High severity
Connectport LTS Firmware: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentiall