CVE-2020-6975: Malicious File Upload
First published: Wed Feb 12 2020(Updated: )
Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a malicious file to the application.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Digi Connectport Lts 32 Mei Bios | =1.2 | |
| Digi Connectport Lts 32 Mei Firmware | =1.4.3 | |
| Digi Connectport Lts 32 Mei |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Digi International ConnectPort LTS 32 MEI?
The vulnerability ID for Digi International ConnectPort LTS 32 MEI is CVE-2020-6975.
What is the severity level of CVE-2020-6975?
The severity level of CVE-2020-6975 is medium (4.9).
How can an attacker exploit CVE-2020-6975?
An attacker can exploit CVE-2020-6975 by uploading a malicious file to the application.
What software versions are affected by CVE-2020-6975?
The affected software versions are Digi Connectport LTS 32 MEI Bios 1.2 and Digi Connectport LTS 32 MEI Firmware 1.4.3.
Is Digi ConnectPort LTS 32 MEI vulnerable to CVE-2020-6975?
Digi ConnectPort LTS 32 MEI is not vulnerable to CVE-2020-6975.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/event
- agent/weakness
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/digi
- canonical/digi connectport lts 32 mei bios
- version/digi connectport lts 32 mei bios/1.2
- canonical/digi connectport lts 32 mei firmware
- version/digi connectport lts 32 mei firmware/1.4.3
- canonical/digi connectport lts 32 mei