← CVE Intelligence

CVE-2023-4299

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication PUBLISHED

Description (CNA)

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

Affected (CNA)

Vendor / productVersions
Digi International / Digi RealPortaffected 0 through 4.8.488.0
Digi International / Digi RealPortaffected 0 through 1.9-40
Digi International / Digi ConnectPort TS 8/16affected 0 before 2.26.2.4
Digi International / Digi Passport Console Serveraffected all versions
Digi International / Digi ConnectPort LTS 8/16/32affected 0 before 1.4.9
Digi International / Digi CM Console Serveraffected all versions
Digi International / Digi PortServer TSaffected all versions
Digi International / Digi PortServer TS MEIaffected all versions
Digi International / Digi PortServer TS MEI Hardenedaffected all versions
Digi International / Digi PortServer TS M MEIaffected all versions
Digi International / Digi PortServer TS P MEIaffected all versions
Digi International / Digi One IAP Familyaffected all versions
Digi International / Digi One IAaffected all versions
Digi International / Digi One SP IAaffected all versions
Digi International / ​Digi One SPaffected all versions
Digi International / Digi WR31affected all versions
Digi International / Digi WR11 XTaffected all versions
Digi International / Digi WR44 Raffected all versions
Digi International / Digi WR21affected all versions
Digi International / Digi Connect ESaffected 0 before 2.26.2.4
Digi International / Digi Connect SPaffected all versions
Digi International / Digi 6350-SRunaffected all versions
Digi International / Digi ConnectCore 8X productsunaffected all versions

CWE

CWE-836

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.