CVE-2024-50626: Path Traversal
Published Dec 9, 2024
·Updated
An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data.
Affected Software
8 affected components
Digi ConnectPort LTS<1.4.12
All of the following
Digi Connectport Lts Firmware<1.4.12
Any of the following
Digi Connectport Lts 16
Digi Connectport Lts 16 Mei
Digi Connectport Lts 16 Mei 2ac
Digi Connectport Lts 32
Digi ConnectPort LTS 32 MEI
Digi Connectport Lts 8 Mei
Event History
Dec 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-50626?
CVE-2024-50626 is a high-severity vulnerability due to its potential for unauthorized data access.
2
How do I fix CVE-2024-50626?
To remediate CVE-2024-50626, upgrade the Digi ConnectPort LTS to version 1.4.12 or later.
3
What type of vulnerability is CVE-2024-50626?
CVE-2024-50626 is a Directory Traversal vulnerability found in the WebFS component.
4
Can CVE-2024-50626 be exploited remotely?
CVE-2024-50626 requires an attacker to be on the local area network to exploit the vulnerability.
5
What could be the consequences of exploiting CVE-2024-50626?
Exploitation of CVE-2024-50626 may lead to unauthorized access to sensitive data within the affected system.