CVE-2022-2634

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.

Score

CVSS 3.1 10.0 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-08-10

Last modified

2025-04-16

Weaknesses

CWE-250

Affected products

• Connectport X2d (Digi)
• Connectport X2d Firmware (Digi)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01