CVE-2022-2634: Digi ConnectPort X2D
An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2634?
The severity of CVE-2022-2634 is critical with a CVSS score of 9.8.
What can an attacker do with CVE-2022-2634?
An attacker may be able to execute malicious actions and upload Python files that can be later executed.
What software is affected by CVE-2022-2634?
Digi Connectport X2d Firmware versions up to and excluding 2020-01-01 are affected.
How can I fix CVE-2022-2634?
To fix CVE-2022-2634, it is recommended to implement device access protections and secure device permissions when using the web application.
Where can I find more information about CVE-2022-2634?
More information about CVE-2022-2634 can be found at the following reference link: [https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01]