Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

digi connectport ts 8 16 firmware vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3

CVE-2021-36767

In Digi RealPort up to and including 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-h...
Digi RealportDigi Connectport Ts 8/16 FirmwareDigi Connectport Lts 8/16/32 FirmwareDigi Passport Integrated Console Server FirmwareDigi Cm FirmwareDigi Portserver Ts FirmwareDigi Portserver Ts Mei FirmwareDigi Portserver Ts Mei Hardened FirmwareDigi Portserver Ts M Mei FirmwareDigi 6350-sr FirmwareDigi Portserver Ts P Mei FirmwareDigi Transport Wr11 Xt FirmwareDigi One Ia FirmwareDigi Wr31 FirmwareDigi Wr44 R FirmwareDigi Connect Es FirmwareDigi Wr21 FirmwareDigi One Iap FirmwareDigi One Iap Haz Firmware
9.8
CVSSv3

CVE-2021-35977

An issue exists in Digi RealPort for Windows up to and including 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution.
Digi RealportDigi Connectport Ts 8/16 FirmwareDigi Connectport Lts 8/16/32 FirmwareDigi Passport Integrated Console Server FirmwareDigi Cm FirmwareDigi Portserver Ts FirmwareDigi Portserver Ts Mei FirmwareDigi Portserver Ts Mei Hardened FirmwareDigi Portserver Ts M Mei FirmwareDigi 6350-sr FirmwareDigi Portserver Ts P Mei FirmwareDigi Transport Wr11 Xt FirmwareDigi One Iap Family FirmwareDigi One Ia FirmwareDigi Wr31 FirmwareDigi Wr44 R FirmwareDigi Connect Es FirmwareDigi Wr21 Firmware
8.1
CVSSv3

CVE-2023-4299

Digi RealPort Protocol is vulnerable to a replay attack that may allow an malicious user to bypass authentication to access connected equipment.
Digi RealportDigi Connectport Ts 8/16 FirmwareDigi Passport Firmware -Digi Connectport Lts 8/16/32 FirmwareDigi Cm Firmware -Digi Portserver Ts Firmware -Digi Portserver Ts Mei Firmware -Digi Portserver Ts Mei Hardened Firmware -Digi Portserver Ts M Mei Firmware -Digi Portserver Ts P Mei Firmware -Digi One Iap Firmware -Digi One Ia Firmware -Digi One Sp Ia Firmware -Digi One Sp Firmware -Digi Wr31 Firmware -Digi Transport Wr11 Xt Firmware -Digi Wr44 R Firmware -Digi Wr21 Firmware -Digi Connect Es FirmwareDigi Connect Sp Firmware -
8.1
CVSSv3

CVE-2021-35979

An issue exists in Digi RealPort up to and including 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication.
Digi RealportDigi Connectport Ts 8/16 FirmwareDigi Connectport Lts 8/16/32 FirmwareDigi Passport Integrated Console Server FirmwareDigi Cm FirmwareDigi Portserver Ts FirmwareDigi Portserver Ts Mei FirmwareDigi Portserver Ts Mei Hardened FirmwareDigi Portserver Ts M Mei FirmwareDigi 6350-sr FirmwareDigi Portserver Ts P Mei FirmwareDigi Transport Wr11 Xt FirmwareDigi One Iap Family FirmwareDigi One Ia FirmwareDigi Wr31 FirmwareDigi Wr44 R FirmwareDigi Connect Es FirmwareDigi Wr21 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook