Embedded - NET+OS Modules - RomPager - Evaluation of Security Vulnerability – VU#561444 Expanded info on CVE-2014-9222, CVE-2014-9223

Many Digi products contain and use the RomPager by Allegrosoft web server technology. It has come to our attention that this embedded web server, which is used for management of our devices contains what we have defined as a critical vulnerability. We urge any customer who may have one of these products where the administrative webserver is available on non-secure networks to either upgrade the firmware to a patched version or to disable the web server for management of these devices.

Affected Products
NET+OS Modules

Embedded - NET+OS Module Firmware Downloads

Product FamilyPart NumberDescriptionLink to upgrade
Connect ME 9210DC-ME-Y401-CConnect ME 9210 2/8 -CDownload
 DC-ME-Y401-C-BConnect ME 9210 2/8 -C (50)Download
 DC-ME-Y401-JTConnect ME 9210 2/8 JTAGDownload
 DC-ME-Y402-CConnect ME 9210 4/8 -CDownload
 DC-ME-Y402-C-BConnect ME 9210 4/8 -C (50)Download
ConnectCore 9PCC-9P-9215-NETCC9P 9215 NET+OS JumpStart KitDownload
 CC-9P-NETCC 9P NET+OS JumpStart KitDownload
 CC-9P-V502-CCC 9P 9215 4/8 NET+OS no RJDownload
 CC-9P-V502-C-BCC 9P 9215 4/8 NET+OS no RJ (25)Download
 CC-9P-V502-ZA-CCC 9P 9215 4/8 NET+OS ENET RJ45Download
 CC-9P-V502-ZA-C-BCC 9P 9215 4/8 NET+OS ENET RJ45 (25)Download
 CC-9P-V513-CCC 9P 9215 8/16MB,NET+OS,no RJDownload
 CC-9P-V513-C-BCC 9P 9215 8/16MB,NET+OS,no RJ (25)Download
 CC-9P-V524-CCC 9P 9215 16/32 NET+OS no ENETDownload
 CC-9P-V524-C-BCC 9P 9215 16/32 NET+OS no ENET (25)Download
Connect Wi-EMDC-WEM-02T-CConnect Wi-EM CF/WDownload
 DC-WEM-02T-C-25Connect Wi-EM CF/W (25)Download
Connect ME 2MBDC-ME-01T-CConnect ME CF/WDownload
 DC-ME-01T-C-10Connect ME CF/W (10)Download
 DC-ME-01T-C-50Connect ME CF/W (50)Download
Connect ME 4MBDC-ME4-01T-CConnect ME -C 4MB FlashDownload
 DC-ME4-01T-C-10Connect ME -C 4MB Flash (10)Download
 DC-ME4-01T-C-50Connect ME -C 4MB Flash (50)Download
 DC-ME4-01T-CCConnect ME -S 4MB CC (50)Download
 DC-ME4-01T-CC-1Connect ME -S 4MB CC RMADownload
Connect Wi-MEDC-WME-01T-CConnect Wi-ME CF/WDownload
 DC-WME-01T-C-10Connect Wi-ME CF/W (10)Download
 DC-WME-01T-C-50Connect Wi-ME CF/W (50)Download
 DC-WME-01T-CLIConnect Wi-ME CLI (50)Download
 DC-WME-01T-CLI-1Connect Wi-ME CLI RMADownload
 DC-WME-01TE-CConnect Wi-ME -C EuropeDownload
 DC-WME-01TE-C-10Connect Wi-ME -C Europe (10)Download
 DC-WME-01TE-C-50Connect Wi-ME -C Europe (50)Download
 DC-WME-STLConnect Wi-ME Sicurtel (50)Download
 DC-WME-STL-1Connect Wi-ME Sicurtel RMADownload
Connect Wi-ME 9210DC-WME-Y402-CConnect Wi-ME 9210 4/8 -CDownload
 DC-WME-Y402-C-BConnect Wi-ME 9210 4/8 -C (50)Download
 DC-WME-Y413-CConnect Wi-ME 9210 8/16 -CDownload
ConnectCore 7UCC-7U-Z111-Z1ConnectCore 7U 2/16 NET+OSDownload
 CC-7U-Z111-Z1-BConnectCore 7U 2/16 NET+OS(25)Download
 CC-7U-Z113-Z1ConnectCore 7U 8/16 NET+OSDownload
 CC-7U-Z113-Z1-BConnectCore 7U 8/16 NET+OS(25)Download
Connect SPDC-SP-01-CConnect SP CF/WDownload
 DC-SP-01-C-25Connect SP CF/W (25)Download
 DC-SP-01-C-WConnect SP CF/W WorldwideDownload
 DC-SP-01-C-W-25Connect SP CF/W Worldwide(25)Download
Last updated: Jun 11, 2019

Filed Under


Recently Viewed

No recently viewed articles

Did you find this article helpful?