Digi vulnerabilitiesNone on the known-exploited list.
Digi has 21 published vulnerabilities across 91 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Transport Wr11 Xt Firmware, with 8. If you run Digi software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Digi products have the most vulnerabilities?
Transport Wr11 Xt Firmware leads with 8 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Digi vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Digi's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Digi flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 29%CVE-2020-10136Medium
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the...
- 4.1%CVE-2018-20162Critical
Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root.
- 3.8%CVE-2004-1973Medium
DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the...
- 3.7%CVE-2021-35978Critical
An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR.
- 2.4%CVE-2019-18859Medium
Digi AnywhereUSB 14 allows XSS via a link for the Digi Page.
- 2.1%CVE-2022-26952High
Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unauthenticated user is redirected to the authentication page.
- 1.8%CVE-2022-26953High
Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow.
- 1.6%CVE-2021-35977Critical
An issue was discovered in Digi RealPort for Windows through 4.8.488.0.
- 1.3%CVE-2021-38412Critical
Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens.
- 1.0%CVE-2022-2634Critical
An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application.
All Digi products we track.
21 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Transport Wr11 Xt Firmwaretransport_wr11_xt_firmware8 vulnerabilities2 versions
- Transport Wr21 Firmwaretransport_wr21_firmware5 vulnerabilities3 versions
- Transport Wr44transport_wr445 vulnerabilities2 versions
- Transport Wr44 Firmwaretransport_wr44_firmware5 vulnerabilities4 versions
- Cmcm4 vulnerabilities1 version
- Realportrealport4 vulnerabilities2 versions
- Transport Wr11 Firmwaretransport_wr11_firmware4 vulnerabilities2 versions
- Transport Wr41 Firmwaretransport_wr41_firmware4 vulnerabilities10 versions
- Wr31 Firmwarewr31_firmware4 vulnerabilities2 versions
- Passport Firmwarepassport_firmware3 vulnerabilities2 versions
- Transport Dr64 Firmwaretransport_dr64_firmware3 vulnerabilities1 version
- Transport Vc74 Firmwaretransport_vc74_firmware3 vulnerabilities1 version
- Connectport Lts 32 Mei BIOSconnectport_lts_32_mei_bios2 vulnerabilities1 version
- Connectport Lts 32 Mei Firmwareconnectport_lts_32_mei_firmware2 vulnerabilities1 version
- Anywhereusb/14 Firmwareanywhereusb\/14_firmware1 vulnerability1 version
- Connectport X2econnectport_x2e1 vulnerability1 version
- Portserver Ts 16 Firmwareportserver_ts_16_firmware1 vulnerability2 versions
- Sarossaros1 vulnerability1 version
- Transport Lr54 Firmwaretransport_lr54_firmware1 vulnerability3 versions
- Www Serverwww_server1 vulnerability1 version
- Connectport Lts Firmwareconnectport_lts_firmware0 vulnerabilities11 versions
This directory lists the 21 Digi products with at least one tracked version, of 91 in our catalogue.
Running Digi? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing.
- Matched to
- Digi on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 21 published vulnerabilities across 91 products and 54 versions from Digi.
None of Digi's vulnerabilities is on the list of flaws known to be exploited today.
Transport Wr11 Xt Firmware, with 8 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Digi products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.