What’s Vulnerable › Vulnerabilities

CVE-2022-2634: Digi ConnectPort X2D

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-10 · updated 2026-06-17
• Weakness: CWE-250

Description

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.

Affected products

• Digi ConnectPort X2D: before 2020-01-01 — fixed in 2020-01-01

How to fix

Upgrade to a fixed version: Digi ConnectPort X2D 2020-01-01. Check the vendor advisory for mitigations.

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01

Get alerted when CVE-2022-2634 or the next vulnerability affects your stack