CVE-2024-50625

Summary

CVE-2024-50625 is a newly disclosed vulnerability affecting Digi ConnectPort LTS before 1.4.12. The issue lies in the file upload handling of a web application, which can be exploited through manipulated POST requests. Malicious users can upload arbitrary files into specific directories, potentially gaining privilege escalation when combined with other vulnerabilities. This vulnerability poses a significant risk and calls for immediate updates to affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.