NetSight
high8.1

CVE-2021-35979

An issue was discovered in Digi RealPort through 4.8.488.0.

Impact

An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication.

Affected products

VendorProductAffected versions
DigiRealport
through 1.9-40
through 4.8.488.0
DigiConnectport Ts 8\/16 Firmware
All versions
DigiConnectport Lts 8\/16\/32 Firmware
All versions
DigiPassport Integrated Console Server Firmware
All versions
DigiCm Firmware
All versions
DigiPortserver Ts Firmware
All versions
DigiPortserver Ts Mei Firmware
All versions
DigiPortserver Ts Mei Hardened Firmware
All versions
DigiPortserver Ts M Mei Firmware
All versions
Digi6350-Sr Firmware
All versions
DigiPortserver Ts P Mei Firmware
All versions
DigiTransport Wr11 Xt Firmware
All versions

Weakness classification

References