critical9.0
CVE-2023-4299
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
Impact
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digi | Realport | through 1.9-40 through 4.8.488.0 |
| Digi | Connectport Ts 8\/16 Firmware | before 2.26.2.4 |
| Digi | Passport Firmware | All versions |
| Digi | Connectport Lts 8\/16\/32 Firmware | before 1.4.9 |
| Digi | Cm Firmware | All versions |
| Digi | Portserver Ts Firmware | All versions |
| Digi | Portserver Ts Mei Firmware | All versions |
| Digi | Portserver Ts Mei Hardened Firmware | All versions |
| Digi | Portserver Ts M Mei Firmware | All versions |
| Digi | Portserver Ts P Mei Firmware | All versions |
| Digi | One Iap Firmware | All versions |
| Digi | One Ia Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
- https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
- https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf