PT-2020-8415 · Digi · Digi Xbee 2

Published 2020-05-21 · Updated 2020-05-22 · CVE-2017-18868

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Digi XBee 2 devices (affected versions not specified)

Description: The issue is related to the network stack upon which the ZigBee protocol is built, causing Digi XBee 2 devices to lack an effective protection mechanism against remote AT commands.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2017-18868

Affected Products

Digi Xbee 2

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-18868 · Security Note
• https://t.me/cvenotify/3987 · Telegram Post
• https://t.me/cibsecurity/12227 · Telegram Post
• https://hindawi.com/journals/scn/2017/1723658 · Note