Stored XSS in Digi PortServer TS Web Interface

Executive Summary

This vulnerability is a stored cross-site scripting (XSS) issue found in the web management interface of certain Digi International devices, including the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA.

A remote, authenticated administrator can inject malicious script code into specific system configuration fields. When other users view the affected pages in their browsers, the injected script executes, potentially compromising their security.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves stored cross-site scripting (XSS) in the web management interface of certain Digi International devices, exploitable by a remote, authenticated administrator injecting script into system configuration fields.

Detection would typically involve reviewing the web management interface configuration fields for suspicious or unexpected script content that could execute in a user's browser.

Since the vulnerability requires authenticated access and involves stored script injection, network detection commands alone may not be sufficient.

No specific detection commands or tools are provided in the available information.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability includes the risk that malicious scripts injected by an authenticated administrator could execute in the browsers of users who view the affected configuration pages.

This could lead to unauthorized actions performed on behalf of those users, theft of sensitive information, session hijacking, or other malicious activities depending on the script's intent.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability allows a remote, authenticated administrator to inject malicious scripts into system configuration fields, which then execute in the browser of users viewing those pages.

Immediate mitigation steps would generally include restricting administrative access to trusted personnel only, ensuring strong authentication controls, and avoiding entering untrusted input into configuration fields.

Since no specific mitigation or patch information is provided, monitoring Digi International's official security resources for updates or patches is recommended.

Useful 0 Not Useful 0