CVE-2021-36767

Summary of CVE-2021-36767 (Digi RealPort) : Affected software is Digi RealPort up to version 4.10.490. The authentication uses a challenge-response mechanism that exposes access to the server password; an unauthenticated client can trigger the server to return a weakly-hashed version of the passw...

CVE-2023-4299

CVE-2023-4299 describes a replay attack in Digi RealPort Protocol that can bypass authentication to access connected equipment. The vulnerability affects a wide range of Digi devices and software using RealPort, due to using a password hash instead of the actual password for authentication. The I...

CVE-2021-35977

Digi RealPort for Windows up to version 4.8.488.0 is affected by a buffer overflow in the handling of ADDP discovery response messages, which could allow arbitrary code execution. Affected product/component: Digi RealPort for Windows (Serial‑over‑LAN). Root cause: buffer overflow via ADDP discove...

CVE-2021-35979

CVE-2021-35979 concerns Digi RealPort up to version 4.8.488.0. The issue is in the product’s proprietary Serial-over-LAN RealPort, where the encrypted mode does not perform authentication, making it susceptible to network-based MITM attacks. Affected component: the encrypted mode of Digi RealPort...