Vulnerabilities

TI-2023-03975 CVE-2023-4299 · GHSA-6mw3-9jr4-xc73

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

MEDIUM 42

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.0068 Published 2023-08-31 Fixed in 2.26.2.4, 1.4.9 +1 CWE-836

TI-2021-14889 CVE-2021-36767 · GHSA-22vf-qc4p-vc3x

In Digi RealPort through 4.10.490, authentication relies on a challenge-response…

MEDIUM 43

In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00687 Published 2021-10-08 No fix listed CWE-916

TI-2021-14430 CVE-2021-35979 · GHSA-w5p3-6pf5-78hg

An issue was discovered in Digi RealPort through 4.8.488.0.

LOW 37

An issue was discovered in Digi RealPort through 4.8.488.0.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00887 Published 2021-10-08 No fix listed CWE-306

TI-2021-14428 CVE-2021-35977 · GHSA-g5mc-mhmx-jqjp

An issue was discovered in Digi RealPort for Windows through 4.8.488.0.

MEDIUM 45

An issue was discovered in Digi RealPort for Windows through 4.8.488.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01579 Published 2021-10-08 No fix listed CWE-120

Vulnerabilities

Filters

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

In Digi RealPort through 4.10.490, authentication relies on a challenge-response…

An issue was discovered in Digi RealPort through 4.8.488.0.

An issue was discovered in Digi RealPort for Windows through 4.8.488.0.