CVE-2023-4299

🗓️ 31 Aug 2023 21:15:09Reported by [email protected]Type

nvd🔗 web.nvd.nist.gov👁 55 Views

Digi RealPort Protocol vulnerability allows replay attack to bypass authentication

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	Digi RealPort Password Hashing	21 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-4299	1 Sep 202300:13	–	circl
CNNVD	Digi RealPort security vulnerabilities	31 Aug 202300:00	–	cnnvd
CVE	CVE-2023-4299	31 Aug 202320:45	–	cve
Cvelist	CVE-2023-4299 Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication	31 Aug 202320:45	–	cvelist
EUVD	EUVD-2023-54170	3 Oct 202520:07	–	euvd
ICS	Digi RealPort Protocol	31 Aug 202306:00	–	ics
osv_cve	CVE-2023-4299	31 Aug 202321:15	–	osv_cve
Prion	Authentication flaw	31 Aug 202321:15	–	prion
Positive Technologies	PT-2023-5295 · Digi · Digi Realport	31 Aug 202300:00	–	ptsecurity

NVD

Node

OR

digi realportRange≤1.9-40linux

digi realportRange≤4.8.488.0windows

Node

AND

digi connectport_ts_8/16_firmwareRange<2.26.2.4

digi connectport_ts_8/16Match-

Node

AND

digi passport_firmwareMatch-

digi passportMatch-

Node

AND

digi connectport_lts_8/16/32_firmwareRange<1.4.9

digi connectport_lts_8/16/32Match-

Node

AND

digi cm_firmwareMatch-

digi cmMatch-

Node

AND

digi portserver_ts_firmwareMatch-

digi portserver_tsMatch-

Node

AND

digi portserver_ts_mei_firmwareMatch-

digi portserver_ts_meiMatch-

Node

AND

digi portserver_ts_mei_hardened_firmwareMatch-

digi portserver_ts_mei_hardenedMatch-

Node

AND

digi portserver_ts_m_mei_firmwareMatch-

digi portserver_ts_m_meiMatch-

Node

AND

digi portserver_ts_p_mei_firmwareMatch-

digi portserver_ts_p_meiMatch-

Node

AND

digi one_iap_firmwareMatch-

digi one_iapMatch-

Node

AND

digi one_ia_firmwareMatch-

digi one_iaMatch-

Node

AND

digi one_sp_ia_firmwareMatch-

digi one_sp_iaMatch-

Node

AND

digi one_sp_firmwareMatch-

digi one_spMatch-

Node

AND

digi wr31_firmwareMatch-

digi wr31Match-

Node

AND

digi transport_wr11_xt_firmwareMatch-

digi transport_wr11_xtMatch-

Node

AND

digi wr44_r_firmwareMatch-

digi wr44_rMatch-

Node

AND

digi wr21_firmwareMatch-

digi wr21Match-

Node

AND

digi connect_es_firmwareRange<2.26.2.4

digi connect_esMatch-

Node

AND

digi connect_sp_firmwareMatch-

digi connect_spMatch-

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
digi	www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf

17 Jun 2026 06:37Current

9.3Critical risk

Vulners AI Score9.3

CVSS 3.18.1 - 9

EPSS0.0068

SSVC

cve-2023-4299 digi realport protocol replay attack authentication bypass connected equipment