Passport Firmware vulnerabilities

2 known vulnerabilities in Passport Firmware from Digi. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Passport Firmware: Out-of-bounds Write

  CVE-2022-26953Apr 6, 2022DigiEPSS 1.79%

  Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowing him to force an overflow when the string is concatenated to the HTML body.

• 7.5 High severity

  Passport Firmware: Out-of-bounds Write

  CVE-2022-26952Apr 6, 2022DigiEPSS 2.13%

  Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unauthenticated user is redirected to the authentication page.