131 matches found
CVE-2025-3659 Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAP
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: Digi PortServer TS - prior to and including 82000747AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774Z, build date 10/19/2020...
Digi多款产品 安全漏洞
Digi PortServer TS and others are products of Digi Corporation.Digi PortServer TS is Digi One SP is an industrial-grade serial device server.Digi One IAP is an industrial automation protocol converter and intelligent serial server designed for PLC and SCADA systems. A security vulnerability exist...
CVE-2024-55548
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e...
CVE-2024-55548
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e...
CVE-2024-55547
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55547
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55545
Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55545
Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55546
Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55548 Denial of Service
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e...
CVE-2024-55548 Denial of Service
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e...
CVE-2024-55548
CVE-2024-55548 concerns the ORing IAP-420 wireless access point. The vulnerability stems from an improper check of password character length in the ORing operation, reported to affect versions through 2.01e. The resulting condition can cause a forced deadlock. Multiple sources corroborate this is...
CVE-2024-55547 Remote Command Execution via SNMP
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55547 Remote Command Execution via SNMP
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55547
CVE-2024-55547 describes a command-injection vulnerability in NET-SNMP used by ORing IAP-420 via SNMP objects. Affected product is ORing IAP-420 (firmware up to 2.01e). Root cause: SNMP objects in NET-SNMP enable command execution; impact is manifested as remote command execution with high confid...
CVE-2024-55546
The CVE refers to ORing IAP-420, where the web interface lacks input validation, allowing stored XSS in versions 2.01e and earlier. The incident is described across multiple sources (Red Hat/CNNVD/CVE records and PT-Security). Root cause: insufficient input validation in the product’s web interfa...
CVE-2024-55546 Stored Cross-Site Scripting
Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55546 Stored Cross-Site Scripting
Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...