Digi Portserver Ts

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:digi_international:digi_portserver_ts:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDigi International (f5e7e52c-f6c9-556e-9dfa-1cc6cb27ef4a)
ProductDigi Portserver Ts (d128aacd-e7f0-59d3-a0a7-36858f360680)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3659 vulnerable 2026-06-03 15:01:05.270960 Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAP
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: * Digi PortServer TS - prior to and including 82000747_AA, build date 06/17/2022 * Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774_Z, build date 10/19/2020 * Digi One IAP – prior to and including 82000770 Z, build date 10/19/2020 A specially crafted POST request to the device’s web interface may allow an unauthenticated attacker to modify configuration settings.
Published: 2025-05-12T20:40:03.567Z
Updated: 2025-05-12T22:06:36.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4299 vulnerable 2026-06-03 14:53:27.749211 Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication
CRITICAL (9)
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
Published: 2023-08-31T20:45:43.866Z
Updated: 2025-01-16T21:30:37.810Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.