CVE-2017-18868: High severity digi xbee 2 firmware vulnerability
Published May 21, 2020
·Updated
Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon which the ZigBee protocol is built.
Affected Software
2 affected components
Digi Xbee 2 Firmware
Digi XBee 2
Event History
May 21, 2020
CVE Published
via MITRE·07:13 PM
Data Sourced
via MITRE·07:13 PM
Description
Frequently Asked Questions
1
What is CVE-2017-18868?
CVE-2017-18868 refers to a vulnerability in Digi XBee 2 devices that allows remote attackers to execute AT commands without proper protection.
2
How does CVE-2017-18868 impact Digi XBee 2 devices?
CVE-2017-18868 exposes Digi XBee 2 devices to remote attacks that can execute AT commands without proper protection.
3
What is the severity of CVE-2017-18868?
The severity of CVE-2017-18868 is rated as high with a severity value of 7.7.
4
What software is affected by CVE-2017-18868?
Digi XBee 2 Firmware and Digi XBee 2 devices are affected by CVE-2017-18868.
5
Is there a fix for CVE-2017-18868?
Currently, there is no known fix for CVE-2017-18868. It is recommended to apply any security patches or updates provided by the vendor.