CVE-2024-50628

An issue was discovered in the web services of Digi ConnectPort LTS before 1.4.12. It allows an attacker on the local area network to achieve unauthorized manipulation of resources, which may lead to remote code execution when combined with other issues.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:digi:connectport_lts_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:digi:connectport_lts_16:-:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_16_mei:-:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_16_mei_2ac:-:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_32:-:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_32_mei:-:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_8_mei:-:*:*:*:*:*:*:*

History

27 Jun 2025, 16:06

Type Values Removed Values Added
First Time Digi connectport Lts 32 Mei
Digi connectport Lts 16 Mei 2ac
Digi connectport Lts 32
Digi connectport Lts 8 Mei
Digi connectport Lts Firmware
Digi
Digi connectport Lts 16
Digi connectport Lts 16 Mei
CPE cpe:2.3:h:digi:connectport_lts_16_mei_2ac:-:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_8_mei:-:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_16_mei:-:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_32:-:*:*:*:*:*:*:*
cpe:2.3:o:digi:connectport_lts_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_32_mei:-:*:*:*:*:*:*:*
cpe:2.3:h:digi:connectport_lts_16:-:*:*:*:*:*:*:*
References () https://www.digi.com/resources/security - () https://www.digi.com/resources/security - Vendor Advisory
References () https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf - () https://www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdf - Product
References () https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf - () https://www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdf - Vendor Advisory

09 Dec 2024, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-12-09 22:15

Updated : 2025-06-27 16:06


NVD link : CVE-2024-50628

Mitre link : CVE-2024-50628


JSON object : View

Products Affected

digi

  • connectport_lts_32
  • connectport_lts_16_mei_2ac
  • connectport_lts_16
  • connectport_lts_8_mei
  • connectport_lts_32_mei
  • connectport_lts_firmware
  • connectport_lts_16_mei
CWE

No CWE.