PT-2020-19321 · Digi International · Connectport Lts 32 Mei

Published 2020-02-12 · Updated 2020-02-21 · CVE-2020-6973

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Digi International ConnectPort LTS 32 MEI version 1.4.3

Description Multiple cross-site scripting vulnerabilities exist that could allow an attacker to cause a denial-of-service condition.

Recommendations For Digi International ConnectPort LTS 32 MEI version 1.4.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-6973

Affected Products

Connectport Lts 32 Mei

References · 4

• https://osv.dev/vulnerability/CVE-2020-6973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6973 · Security Note
• https://us-cert.gov/ics/advisories/icsa-20-042-13 · Note
• https://t.me/cvenotify/980 · Telegram Post