Digi PortServer TS 16

🗓️ 14 Sep 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 54 Views

Digi PortServer TS 16 firmware versions 82000684 and 82000685 allow improper authentication, granting control of settings and command execution. Discontinued in 2016. Upgrade recommended

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-38412	18 Sep 202100:23	–	circl
CNNVD	Digi PortServer TS 访问控制错误漏洞	14 Sep 202100:00	–	cnnvd
CVE	CVE-2021-38412	17 Sep 202119:07	–	cve
Cvelist	CVE-2021-38412 Digi PortServer TS 16 Improper Authentication	17 Sep 202119:07	–	cvelist
EUVD	EUVD-2021-24864	7 Oct 202500:30	–	euvd
NVD	CVE-2021-38412	17 Sep 202120:15	–	nvd
OSV	CVE-2021-38412	17 Sep 202120:15	–	osv
Prion	Authentication flaw	17 Sep 202120:15	–	prion
Positive Technologies	PT-2021-22116 · Digi · Digi Portserver Ts 16 Rack	17 Sep 202100:00	–	ptsecurity

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-257-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-257-01
us-cert	www.us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B

14 Sep 2021 00:00Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.6 - 9.8

EPSS0.00156

digi portserver ts 16 improper authentication firmware version discontinued upgrade vulnerability network exposure remote access vpns risk assessment security practices