CVE-2024-50625: Malicious File Upload
An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentially enabling privilege escalation when combined with other vulnerabilities.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50625?
CVE-2024-50625 has been classified as a medium severity vulnerability due to its potential for arbitrary file uploads and privilege escalation.
How do I fix CVE-2024-50625?
To fix CVE-2024-50625, update the Digi ConnectPort LTS to version 1.4.12 or later.
What impact does CVE-2024-50625 have on my system?
CVE-2024-50625 can allow an attacker to manipulate file paths through malicious POST requests, leading to possible unauthorized access and privilege escalation.
Is CVE-2024-50625 specific to certain versions of the Digi ConnectPort LTS?
Yes, CVE-2024-50625 affects Digi ConnectPort LTS versions prior to 1.4.12.
What kind of attacks can CVE-2024-50625 enable?
CVE-2024-50625 can enable arbitrary file uploads, which may lead to code execution and privilege escalation on the affected system.