Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2023-4299

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

Description

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Digi International Digi RealPort

Default version status: unaffected

  • 0 to ≤ 4.8.488.0affected

Digi International Digi RealPort

Default version status: unaffected

  • 0 to ≤ 1.9-40affected

Digi International Digi ConnectPort TS 8/16

Default version status: unaffected

  • 0 to < 2.26.2.4affected

Digi International Digi Passport Console Server

Default version status: unaffected

  • all versionsaffected

Digi International Digi ConnectPort LTS 8/16/32

Default version status: unaffected

  • 0 to < 1.4.9affected

Digi International Digi CM Console Server

Default version status: unaffected

  • all versionsaffected

Digi International Digi PortServer TS

Default version status: unaffected

  • all versionsaffected

Digi International Digi PortServer TS MEI

Default version status: unaffected

  • all versionsaffected

Digi International Digi PortServer TS MEI Hardened

Default version status: unaffected

  • all versionsaffected

Digi International Digi PortServer TS M MEI

Default version status: unaffected

  • all versionsaffected

Digi International Digi PortServer TS P MEI

Default version status: unaffected

  • all versionsaffected

Digi International Digi One IAP Family

Default version status: unaffected

  • all versionsaffected

Digi International Digi One IA

Default version status: unaffected

  • all versionsaffected

Digi International Digi One SP IA

Default version status: unaffected

  • all versionsaffected

Digi International ​Digi One SP

Default version status: unaffected

  • all versionsaffected

Digi International Digi WR31

Default version status: unaffected

  • all versionsaffected

Digi International Digi WR11 XT

Default version status: unaffected

  • all versionsaffected

Digi International Digi WR44 R

Default version status: unaffected

  • all versionsaffected

Digi International Digi WR21

Default version status: unaffected

  • all versionsaffected

Digi International Digi Connect ES

Default version status: unaffected

  • 0 to < 2.26.2.4affected

Digi International Digi Connect SP

Default version status: unaffected

  • all versionsaffected

Digi International Digi 6350-SR

Default version status: unaffected

  • all versionsunaffected

Digi International Digi ConnectCore 8X products

Default version status: unaffected

  • all versionsunaffected

References