CRITICAL🇵🇱 Wersja polska

CVE-2023-4299

CVSS 9.0v3.1pub. 2023-08-31upd. 2024-11-21

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Digi Cm

    HW
    Digi
    all versions

  • Digi Cm Firmware

    OS
    Digi
    all versions

  • Digi Connect Es

    HW
    Digi
    all versions

  • Digi Connect Es Firmware

    OS
    Digi
    < 2.26.2.4

  • Digi Connectport Lts 8\/16\/32

    HW
    Digi
    all versions

  • Digi Connectport Lts 8\/16\/32 Firmware

    OS
    Digi
    < 1.4.9

  • Digi Connectport Ts 8\/16

    HW
    Digi
    all versions

  • Digi Connectport Ts 8\/16 Firmware

    OS
    Digi
    < 2.26.2.4

  • Digi Connect Sp

    HW
    Digi
    all versions

  • Digi Connect Sp Firmware

    OS
    Digi
    all versions

  • Digi One Ia

    HW
    Digi
    all versions

  • Digi One Ia Firmware

    OS
    Digi
    all versions

  • Digi One Iap

    HW
    Digi
    all versions

  • Digi One Iap Firmware

    OS
    Digi
    all versions

  • Digi One Sp

    HW
    Digi
    all versions

  • Digi One Sp Firmware

    OS
    Digi
    all versions

  • Digi One Sp Ia

    HW
    Digi
    all versions

  • Digi One Sp Ia Firmware

    OS
    Digi
    all versions

  • Digi Passport

    HW
    Digi
    all versions

  • Digi Passport Firmware

    OS
    Digi
    all versions

  • Digi Portserver Ts

    HW
    Digi
    all versions

  • Digi Portserver Ts Firmware

    OS
    Digi
    all versions

  • Digi Portserver Ts Mei

    HW
    Digi
    all versions

  • Digi Portserver Ts Mei Firmware

    OS
    Digi
    all versions

  • Digi Portserver Ts Mei Hardened

    HW
    Digi
    all versions

  • Digi Portserver Ts Mei Hardened Firmware

    OS
    Digi
    all versions

  • Digi Portserver Ts M Mei

    HW
    Digi
    all versions

  • Digi Portserver Ts M Mei Firmware

    OS
    Digi
    all versions

  • Digi Portserver Ts P Mei

    HW
    Digi
    all versions

  • Digi Portserver Ts P Mei Firmware

    OS
    Digi
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2021-35978CRITICAL9.8PL ✓same product

RCE z uprawnieniami SUPER w protokole ZING urządzeń Digi TransPort

CVE-2021-36767CRITICAL9.8PL ✓same product

Digi RealPort — słabe haszowanie hasła umożliwia nieautoryzowany dostęp

CVE-2021-35977CRITICAL9.8PL ✓same product

Buffer overflow w Digi RealPort — wykonanie dowolnego kodu przez ADDP

CVE-2022-26953HIGH7.5same product

Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in th...

CVE-2022-26952HIGH7.5same product

Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Locat...