CVE-2017-18868

7.7 highEPSS 0.8%

High (7.7) in digi xbee 2 firmware. EPSS 0.8% chance of exploitation in the next 30 days.

Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon which the ZigBee protocol is built.

Severity

CVSS 3.1

7.7 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2020-05-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

digi:xbee_2_firmware

References

https://www.hindawi.com/journals/scn/2017/1723658/
https://www.hindawi.com/journals/scn/2017/1723658/

Check your stack JSON