Approved changes feed: RSS · Atom

cpe:2.3:o:digi:portserver_ts_16_firmware:82000685:*:*:*:*:*:*:*

part: o version: 82000685 update: *

VendorDigi (06e695c7-8864-5e4e-a0e0-7109e4ba48e8)
ProductPortserver Ts 16 Firmware (1d7e1089-0c09-5400-9be3-4d2d36ad3a2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38412 vulnerable 2026-06-08 05:32:56.053259 Digi PortServer TS 16 Improper Authentication
CRITICAL (9.6)
Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to achieve further control in.
Published: 2021-09-17T19:07:49.497Z
Updated: 2024-09-17T00:06:58.547Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.