CVE-2021-38412 — Digi PortServer TS 16 Improper Authentication
Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication…
Published: 2021-09-17 · CVSS: 9.6 · CVSS 3.1
Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to achieve further control in.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7