Approved changes feed: RSS · Atom

cpe:2.3:a:digi_international:digi_one_sp_ia:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDigi International (f5e7e52c-f6c9-556e-9dfa-1cc6cb27ef4a)
ProductDigi One Sp Ia (cbe28fd9-dcba-5127-bcc9-6039a2d38ff7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-12948 vulnerable 2026-07-29 00:23:32.700169 Stored Cross-Site Scripting (XSS)
A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79).
Published: 2026-07-07T14:32:43.977Z
Updated: 2026-07-13T16:19:13.748Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4299 vulnerable 2026-06-08 06:16:12.046320 Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication
CRITICAL (9)
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
Published: 2023-08-31T20:45:43.866Z
Updated: 2025-01-16T21:30:37.810Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.