Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistIcscertCVELIST:CVE-2023-4299
HistoryAug 31, 2023 - 8:45 p.m.

CVE-2023-4299 Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

2023-08-3120:45:43
CWE-836
icscert
www.cve.org
2
digi realport
protocol
replay attack
authentication
access connected equipment

CVSS3

9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

54.0%

JSON

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Digi RealPort",
    "vendor": "Digi International ",
    "versions": [
      {
        "lessThanOrEqual": "4.8.488.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Digi RealPort",
    "vendor": "Digi International ",
    "versions": [
      {
        "lessThanOrEqual": "1.9-40",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi ConnectPort TS 8/16",
    "vendor": "Digi International ",
    "versions": [
      {
        "lessThan": "2.26.2.4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi Passport Console Server",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi ConnectPort LTS 8/16/32",
    "vendor": "Digi International ",
    "versions": [
      {
        "lessThan": "1.4.9",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi CM Console Server",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi PortServer TS",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi PortServer TS MEI",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi PortServer TS MEI Hardened",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi PortServer TS M MEI",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi PortServer TS P MEI",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi One IAP Family",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi One IA",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi One SP IA",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "​Digi One SP",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi WR31",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi WR11 XT",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi WR44 R",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi WR21",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi Connect ES",
    "vendor": "Digi International ",
    "versions": [
      {
        "lessThan": "2.26.2.4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi Connect SP",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi 6350-SR",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "unaffected",
        "version": "all versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Digi ConnectCore 8X products",
    "vendor": "Digi International ",
    "versions": [
      {
        "status": "unaffected",
        "version": "all versions"
      }
    ]
  }
]

Related

nvd 1
cve 1
ics 1
prion 1
nvd
nvd
CVE-2023-4299
2023-08-31 21:15:09
cve
cve
CVE-2023-4299
2023-08-31 21:15:09
ics
ics
​Digi RealPort Protocol
2023-08-31 12:00:00
prion
prion
Authentication flaw
2023-08-31 21:15:00

CVSS3

9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

54.0%

JSON
Related for CVELIST:CVE-2023-4299
nvd1cve1ics1prion1