digi device servers

The digi device servers tag covers security information about Digi International serial device servers used to connect equipment to Ethernet networks. Current coverage centers on CVE-2025-3659, an authentication bypass affecting PortServer TS and Digi One SP, SP IA, IA, and IAP models running pre-2025 firmware. The vulnerability can allow unauthenticated attackers to reach restricted device resources through the web interface. This topic is especially relevant to Windows environments that still depend on serial equipment, industrial edge devices, or long-lived infrastructure. Follow this archive for practical context on affected hardware, firmware remediation, and the risks of leaving embedded administration panels unmaintained.