CVE-2022-2634 CRITICAL

CVE-2022-2634: Digi ConnectPort X2D

Vendor Digi
Product ConnectPort X2D
Weakness CWE-250
Published August 9, 2022
Last update April 16, 2025

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.

Key dates

02Disclosure timeline

August 9, 2022 CVE published
April 16, 2025 Record updated