CVE-2022-2634: Digi ConnectPort X2D
First published: Thu Aug 04 2022(Updated: )
An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Digi Connectport X2d Firmware | <2020-01-01 | |
| Digi Connectport X2d | ||
| Digi International, Inc. Digi ConnectPort X2D Gateway: All firmware versions in devices manufactured prior to January 2020 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-2634?
The severity of CVE-2022-2634 is critical with a CVSS score of 9.8.
What can an attacker do with CVE-2022-2634?
An attacker may be able to execute malicious actions and upload Python files that can be later executed.
What software is affected by CVE-2022-2634?
Digi Connectport X2d Firmware versions up to and excluding 2020-01-01 are affected.
How can I fix CVE-2022-2634?
To fix CVE-2022-2634, it is recommended to implement device access protections and secure device permissions when using the web application.
Where can I find more information about CVE-2022-2634?
More information about CVE-2022-2634 can be found at the following reference link: [https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01]
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/title
- agent/description
- agent/first-publish-date
- agent/severity
- agent/references
- agent/event
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- agent/trending
- vendor/digi
- canonical/digi connectport x2d firmware
- canonical/digi connectport x2d
- vendor/digi international, inc.
- canonical/digi international, inc. digi connectport x2d gateway: all firmware versions in devices manufactured prior to january 2020