CVE-2017-18868: Digi Xbee 2 Firmware

High severity, CVSS 7.7. EPSS: 0.8% chance of exploitation in the next 30 days.

Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon which the ZigBee protocol is built.

Affected products

• Digi Xbee 2 Firmware: affected versions not specified

Published 2020-05-21. Last modified 2026-06-17.