Vulnerabilities

TI-2023-03975 CVE-2023-4299 · GHSA-6mw3-9jr4-xc73

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

MEDIUM 42

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.0068 Published 2023-08-31 Fixed in 2.26.2.4, 1.4.9 +1 CWE-836

TI-2021-15251 CVE-2021-37189 · GHSA-5xj4-c9mm-32pr

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4.

LOW 34

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2021-12-10 No fix listed CWE-311

TI-2021-15250 CVE-2021-37188 · GHSA-v69j-xjp2-jhm8

An issue was discovered on Digi TransPort devices through 2021-07-21.

LOW 39

An issue was discovered on Digi TransPort devices through 2021-07-21.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00481 Published 2021-12-10 No fix listed CWE-345

TI-2021-15249 CVE-2021-37187 · GHSA-j8g6-7jj6-7w7v

An issue was discovered on Digi TransPort devices through 2021-07-21.

LOW 30

An issue was discovered on Digi TransPort devices through 2021-07-21.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00704 Published 2021-12-10 No fix listed CWE-522

TI-2021-14429 CVE-2021-35978 · GHSA-62p6-2538-mvjg

An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR.

MEDIUM 48

An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03676 Published 2021-12-10 No fix listed CWE-77

TI-2021-14889 CVE-2021-36767 · GHSA-22vf-qc4p-vc3x

In Digi RealPort through 4.10.490, authentication relies on a challenge-response…

MEDIUM 43

In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00687 Published 2021-10-08 No fix listed CWE-916

TI-2021-14430 CVE-2021-35979 · GHSA-w5p3-6pf5-78hg

An issue was discovered in Digi RealPort through 4.8.488.0.

LOW 37

An issue was discovered in Digi RealPort through 4.8.488.0.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00887 Published 2021-10-08 No fix listed CWE-306

TI-2021-14428 CVE-2021-35977 · GHSA-g5mc-mhmx-jqjp

An issue was discovered in Digi RealPort for Windows through 4.8.488.0.

MEDIUM 45

An issue was discovered in Digi RealPort for Windows through 4.8.488.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01579 Published 2021-10-08 No fix listed CWE-120

Vulnerabilities

Filters