High severity8.8NVD Advisory· Published Dec 9, 2024· Updated Jun 17, 2026

CVE-2024-50626

Description

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Directory Traversal vulnerability exists in WebFS. This allows an attacker on the local area network to manipulate URLs to include traversal sequences, potentially leading to unauthorized access to data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Digi International Inc/Connectport Lts Firmware
cpe:2.3:o:digi:connectport_lts_firmware:*:*:*:*:*:*:*:*
Range: <1.4.12
Digi International Inc/ConnectPort LTScpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.4.12

Patches

Vulnerability mechanics

References

www.digi.com/getattachment/Resources/Security/Alerts/Digi-ConnectPort-LTS-Firmware-Update/ConnectPort-LTS-KB.pdfnvdVendor Advisory
www.digi.com/resources/securitynvdVendor Advisory
www.digi.com/resources/documentation/digidocs/pdfs/90001001.pdfnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000