CVE-2020-12878: Digi Connectport x2e Firmware

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /etc/init.d/S50dropbear.sh and the /WEB/python/.ssh directory.

Affected products

• Digi Connectport x2e Firmware: before 3.2.30.6 (fixed in 3.2.30.6)

Published 2021-02-18. Last modified 2026-06-17.