Skip to content
OpenAdvisories
Critical ICSA-21-257-01 1 CVE

Digi PortServer TS 16

Published Sep 14, 2021 · Updated Sep 14, 2021

Vendor: Digi International Product: PortServer TS 16

Summary

Successful exploitation of this vulnerability allows write access, which grants control of settings, command execution, and access to the command line interface.

Vulnerabilities 1

  • Critical 9.6
    CVE-2021-38412

    Digi PortServer TS 16 Improper Authentication

    Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and…

    Digi International PortServer TS 16

Revision history

  1. #1

    ICSA-21-257-01 Digi PortServer TS 16

References