CVE-2022-2634
Digi ConnectPort X2D
- State
- Published
- Severity
- 10.0 Critical
- Published
- Aug 9, 2022
- Updated
- Apr 16, 2025
- Reserved
- Aug 2, 2022
Description
An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 10.0 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | icscert |
Weaknesses
- CWE-250 Execution with Unnecessary Privileges
Affected Products
| Product | Versions |
|---|---|
ConnectPort X2DDigi |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.