Critical severityNVD Advisory· Published May 12, 2025· Updated Apr 15, 2026
CVE-2025-3659
CVE-2025-3659
Description
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families:
- Digi PortServer TS - prior to and including 82000747_AA, build date 06/17/2022
- Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774_Z, build date 10/19/2020
- Digi One IAP – prior to and including 82000770 Z, build date 10/19/2020
A specially crafted POST request to the device’s web interface may allow an unauthenticated attacker to modify configuration settings.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- hub.digi.com/support/products/infrastructure-management/digi-one-iap-haz/nvd
- hub.digi.com/support/products/infrastructure-management/digi-one-sp-ia/nvd
- hub.digi.com/support/products/infrastructure-management/digi-portserver-ts/nvd
- www.digi.com/getattachment/Resources/Security/Alerts/Improper-authentication-handling-for-Digi-PortServ/improper-authentication-handling.pdfnvd
News mentions
0No linked articles in our index yet.