{"id":"CVE-2022-2634","aliases":["EUVD-2022-34881","GHSA-rpmr-9m52-wm2f"],"status":"published","title":"Digi ConnectPort X2D","description":"An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01035,"percentile":0.6415,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-250"],"published":"2022-08-09T20:18:31Z","modified":"2026-06-17T04:42:15Z","products":[{"vendor":"digi","product":"connectport x2d"},{"vendor":"digi","product":"connectport_x2d_firmware"}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2634"},{"url":"https://github.com/advisories/GHSA-rpmr-9m52-wm2f"}],"sources":{"cve":[{"id":"CVE-2022-2634","title":"Digi ConnectPort X2D","description":"An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.","status":"published","published":"2022-08-09T20:18:31.257Z","modified":"2025-04-16T16:13:37.837Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-250"],"updated_at":"2026-11-02T14:34:32.156873Z"}],"euvd":[{"id":"EUVD-2022-34881","description":"An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.","status":"published","published":"2022-08-09T20:18:31Z","modified":"2025-04-16T16:13:37Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:24.329168Z"}],"ghsa":[{"id":"GHSA-rpmr-9m52-wm2f","title":"An attacker may be able to execute malicious actions due to the lack of device access protections...","description":"An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.","status":"published","published":"2022-08-11T00:00:17Z","modified":"2023-01-28T05:06:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-250"],"updated_at":"2026-11-02T14:44:24.844334Z"}],"nvd":[{"id":"CVE-2022-2634","description":"An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.","status":"published","published":"2022-08-10T20:15:36.597Z","modified":"2026-06-17T04:42:15.153Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-250"],"updated_at":"2026-11-02T14:07:24.750124Z"}]}}