D
Digi
Security Risk Profile
65
/100
highSecurity Risk Score
Comprehensive risk assessment based on 29 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 27, 2004 to present
29
Total CVEs
21
Critical+High
0
Exploited
19
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
19
Critical/High
Risk Level
65/100
high
Severity Distribution
Critical
9High
12Medium
8Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
4
2
Buffer Overflow
3
3
Input Validation
2
4
Malicious File Upload
2
5
OS Command Injection
1
Most Affected Products
1. Cisco NX-OS515
2. Digi Transport Wr41 Firmware10
3. Digi Transport Wr11 Xt Firmware9
4. Digi Transport Wr44 Firmware8
5. Digi Transport Wr21 Firmware6
Recent Vulnerabilities
See more →CVE-2026-75937
CVSS 9.4critical
OS Command Injection in Digi Accelerated Linux (DAL OS)
Oct 2, 2026🔧 No Patch
CVE-2026-12948
CVSS 4.8medium
Stored Cross-Site Scripting (XSS)
Jul 7, 2026🔧 No Patch
CVE-2025-13319
CVSS 8.8high
Authenticated SQL injection in API - Digi On-Prem Manager
Nov 17, 2025🔧 No Patch
CVE-2025-3659
CVSS 9.4critical
Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAP
May 12, 2025🔧 No Patch
CVE-2024-50627
CVSS 8.8high
Dec 9, 2024🔧 No Patch
CVE-2024-50628
CVSS 8.8high
Dec 9, 2024🔧 No Patch
CVE-2024-50626
CVSS 8.8high
Dec 9, 2024🔧 No Patch
CVE-2024-50625
CVSS 8.0high
Dec 9, 2024🔧 No Patch
CVE-2023-4299
CVSS 9.0critical
Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication
Aug 31, 2023
CVE-2022-2634
CVSS 10.0critical
Digi ConnectPort X2D
Aug 9, 2022🔧 No Patch
Monitor Digi in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.