cve 2025-3659

CVE-2025-3659 concerns an authentication bypass affecting the web interfaces of Digi International PortServer TS and Digi One SP, SP IA, IA, and IAP serial device servers running pre-2025 firmware. This tag page collects coverage of the CISA warning, Digi’s security notice, and the related NVD record. The issue can allow unauthenticated attackers to reach restricted device resources, making exposed or poorly maintained serial-to-Ethernet infrastructure a security concern. For Windows environments that still connect legacy serial equipment to networks, the topic highlights the importance of identifying affected devices, reviewing firmware levels, and addressing forgotten industrial edge systems before they become an entry point.