In Digi RealPort through 4.10.490, authentication relies on a challenge-response…
Priority MEDIUM 43CWE-916Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server.
Why it matters now
EPSS 0.00687 52nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 38
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:digi:realport:*:*:*:*:*:linux:*:* | up to 1.9-40 | Vulnerable | Digi |
| cpe:2.3:a:digi:realport:*:*:*:*:*:windows:*:* | up to 4.10.490 | Vulnerable | Digi |
| cpe:2.3:o:digi:connectport_ts_8\/16_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:connectport_ts_8\/16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:connectport_lts_8\/16\/32_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:connectport_lts_8\/16\/32:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:passport_integrated_console_server_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:passport_integrated_console_server:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:cm_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:cm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
- cpe:2.3:a:digi:realport:*:*:*:*:*:linux:*:* Versions up to 1.9-40 Vulnerable ·Digi
- cpe:2.3:a:digi:realport:*:*:*:*:*:windows:*:* Versions up to 4.10.490 Vulnerable ·Digi
- cpe:2.3:o:digi:connectport_ts_8\/16_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:connectport_ts_8\/16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:connectport_lts_8\/16\/32_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:connectport_lts_8\/16\/32:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:passport_integrated_console_server_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:passport_integrated_console_server:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:cm_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:cm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
Show 28 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:digi:portserver_ts_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:portserver_ts:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:portserver_ts_mei_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:portserver_ts_mei:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:portserver_ts_mei_hardened_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:portserver_ts_mei_hardened:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:portserver_ts_m_mei_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:portserver_ts_m_mei:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:6350-sr_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:6350-sr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:portserver_ts_p_mei_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:portserver_ts_p_mei:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:transport_wr11_xt_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:transport_wr11_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:one_ia_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:one_ia:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:wr31_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:wr31:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:wr44_r_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:wr44_r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:connect_es_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:connect_es:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:wr21_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:wr21:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:one_iap_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:one_iap:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
| cpe:2.3:o:digi:one_iap_haz_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Digi |
| cpe:2.3:h:digi:one_iap_haz:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Digi |
- cpe:2.3:o:digi:portserver_ts_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:portserver_ts:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:portserver_ts_mei_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:portserver_ts_mei:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:portserver_ts_mei_hardened_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:portserver_ts_mei_hardened:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:portserver_ts_m_mei_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:portserver_ts_m_mei:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:6350-sr_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:6350-sr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:portserver_ts_p_mei_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:portserver_ts_p_mei:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:transport_wr11_xt_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:transport_wr11_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:one_ia_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:one_ia:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:wr31_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:wr31:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:wr44_r_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:wr44_r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:connect_es_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:connect_es:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:wr21_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:wr21:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:one_iap_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:one_iap:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
- cpe:2.3:o:digi:one_iap_haz_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Digi
- cpe:2.3:h:digi:one_iap_haz:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Digi
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-36767
- 2026-10-03 Alias added: GHSA-22vf-qc4p-vc3x
References
More Digi 6350-sr Firmware vulnerabilities
- TI-2021-14428 An issue was discovered in Digi RealPort for Windows through 4.8.488.0. CVSS 3.1CRITICAL 9.8
- TI-2021-14430 An issue was discovered in Digi RealPort through 4.8.488.0. CVSS 3.1HIGH 8.1
Sources
- CVE-2021-36767 · CVE Program
- CVE-2021-36767 · NVD
- FIRST EPSS
- GHSA-22vf-qc4p-vc3x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences