Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2023-4299

Summary
Assigner-icscert
Assigner Org ID-7d14cffa-0d7d-4270-9dc0-52cabd5a23a6
Published At-31 Aug, 2023 | 20:45
Updated At-16 Jan, 2025 | 21:30
Rejected At-
Credits

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:icscert
Assigner Org ID:7d14cffa-0d7d-4270-9dc0-52cabd5a23a6
Published At:31 Aug, 2023 | 20:45
Updated At:16 Jan, 2025 | 21:30
Rejected At:
▼CVE Numbering Authority (CNA)
Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

Affected Products
Vendor
Digi International
Product
Digi RealPort
Platforms
  • Windows
Default Status
unaffected
Versions
Affected
  • From 0 through 4.8.488.0 (custom)
Vendor
Digi International
Product
Digi RealPort
Platforms
  • Linux
Default Status
unaffected
Versions
Affected
  • From 0 through 1.9-40 (custom)
Vendor
Digi International
Product
Digi ConnectPort TS 8/16
Default Status
unaffected
Versions
Affected
  • From 0 before 2.26.2.4 (custom)
Vendor
Digi International
Product
Digi Passport Console Server
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi ConnectPort LTS 8/16/32
Default Status
unaffected
Versions
Affected
  • From 0 before 1.4.9 (custom)
Vendor
Digi International
Product
Digi CM Console Server
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi PortServer TS
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi PortServer TS MEI
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi PortServer TS MEI Hardened
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi PortServer TS M MEI
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi PortServer TS P MEI
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi One IAP Family
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi One IA
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi One SP IA
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
​Digi One SP
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi WR31
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi WR11 XT
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi WR44 R
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi WR21
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi Connect ES
Default Status
unaffected
Versions
Affected
  • From 0 before 2.26.2.4 (custom)
Vendor
Digi International
Product
Digi Connect SP
Default Status
unaffected
Versions
Affected
  • all versions
Vendor
Digi International
Product
Digi 6350-SR
Default Status
unaffected
Versions
Unaffected
  • all versions
Vendor
Digi International
Product
Digi ConnectCore 8X products
Default Status
unaffected
Versions
Unaffected
  • all versions
Problem Types
TypeCWE IDDescription
CWECWE-836CWE-836
Type: CWE
CWE ID: CWE-836
Description: CWE-836
Metrics
VersionBase scoreBase severityVector
3.19.0CRITICAL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Version: 3.1
Base score: 9.0
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Digi International recommends users acquire and install patches that they have made available for the following products: * ​RealPort software for Windows: Fixed in 4.10.490 * ​Digi ConnectPort TS 8/16: Fixed in firmware version 2.26.2.4 * ​Digi ConnectPort LTS 8/16/32: Fixed in version 1.4.9 * ​Digi Connect ES: Fixed in firmware version 2.26.2.4 ​For more information, see the customer notification document https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf  published by Digi International.

Configurations
Workarounds

Dragos recommends restricting access to Digi devices on TCP/771 (default) or TCP/1027 (if encryption is enabled, this is the default port). Only allow the workstations which initiate RealPort connections to communicate to the field equipment on those ports. Note that most of Digi's devices allow you to change the setting for which TCP port the RealPort service runs on, so end users should consult their device configuration and restrict access to the configured port if it is not the default. ​If using the system in 'reverse' mode, where the Digi device calls back to the Windows or Linux workstation, then Dragos recommends restricting access to the workstation on TCP/771 or TCP/1027 to known Digi RealPort devices on your network. This port may be configured by end users, so consult the workstation and device configurations to ensure coverage.

Exploits
Credits
finder
Reid Wightman of Dragos, Inc reported this vulnerability to Digi International.
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
N/A
https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf
N/A
Hyperlink: https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
Resource: N/A
Hyperlink: https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
x_transferred
https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf
x_transferred
Hyperlink: https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
Resource:
x_transferred
Hyperlink: https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf
Resource:
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:ics-cert@hq.dhs.gov
Published At:31 Aug, 2023 | 21:15
Updated At:06 Sep, 2023 | 20:13

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.18.1HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary3.19.0CRITICAL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Type: Primary
Version: 3.1
Base score: 8.1
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Type: Secondary
Version: 3.1
Base score: 9.0
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CPE Matches
digi
digi
>>realport>>Versions up to 1.9-40(inclusive)
cpe:2.3:a:digi:realport:*:*:*:*:*:linux:*:*
digi
digi
>>realport>>Versions up to 4.8.488.0(inclusive)
cpe:2.3:a:digi:realport:*:*:*:*:*:windows:*:*
digi
digi
>>connectport_ts_8\/16>>-
cpe:2.3:h:digi:connectport_ts_8\/16:-:*:*:*:*:*:*:*
digi
digi
>>connectport_ts_8\/16_firmware>>Versions before 2.26.2.4(exclusive)
cpe:2.3:o:digi:connectport_ts_8\/16_firmware:*:*:*:*:*:*:*:*
digi
digi
>>passport>>-
cpe:2.3:h:digi:passport:-:*:*:*:*:*:*:*
digi
digi
>>passport_firmware>>-
cpe:2.3:o:digi:passport_firmware:-:*:*:*:*:*:*:*
digi
digi
>>connectport_lts_8\/16\/32_firmware>>Versions before 1.4.9(exclusive)
cpe:2.3:o:digi:connectport_lts_8\/16\/32_firmware:*:*:*:*:*:*:*:*
digi
digi
>>connectport_lts_8\/16\/32>>-
cpe:2.3:h:digi:connectport_lts_8\/16\/32:-:*:*:*:*:*:*:*
digi
digi
>>cm_firmware>>-
cpe:2.3:o:digi:cm_firmware:-:*:*:*:*:*:*:*
digi
digi
>>cm>>-
cpe:2.3:h:digi:cm:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts_firmware>>-
cpe:2.3:o:digi:portserver_ts_firmware:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts>>-
cpe:2.3:h:digi:portserver_ts:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts_mei_firmware>>-
cpe:2.3:o:digi:portserver_ts_mei_firmware:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts_mei>>-
cpe:2.3:h:digi:portserver_ts_mei:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts_mei_hardened_firmware>>-
cpe:2.3:o:digi:portserver_ts_mei_hardened_firmware:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts_mei_hardened>>-
cpe:2.3:h:digi:portserver_ts_mei_hardened:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts_m_mei_firmware>>-
cpe:2.3:o:digi:portserver_ts_m_mei_firmware:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts_m_mei>>-
cpe:2.3:h:digi:portserver_ts_m_mei:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts_p_mei_firmware>>-
cpe:2.3:o:digi:portserver_ts_p_mei_firmware:-:*:*:*:*:*:*:*
digi
digi
>>portserver_ts_p_mei>>-
cpe:2.3:h:digi:portserver_ts_p_mei:-:*:*:*:*:*:*:*
digi
digi
>>one_iap_firmware>>-
cpe:2.3:o:digi:one_iap_firmware:-:*:*:*:*:*:*:*
digi
digi
>>one_iap>>-
cpe:2.3:h:digi:one_iap:-:*:*:*:*:*:*:*
digi
digi
>>one_ia_firmware>>-
cpe:2.3:o:digi:one_ia_firmware:-:*:*:*:*:*:*:*
digi
digi
>>one_ia>>-
cpe:2.3:h:digi:one_ia:-:*:*:*:*:*:*:*
digi
digi
>>one_sp_ia_firmware>>-
cpe:2.3:o:digi:one_sp_ia_firmware:-:*:*:*:*:*:*:*
digi
digi
>>one_sp_ia>>-
cpe:2.3:h:digi:one_sp_ia:-:*:*:*:*:*:*:*
digi
digi
>>one_sp_firmware>>-
cpe:2.3:o:digi:one_sp_firmware:-:*:*:*:*:*:*:*
digi
digi
>>one_sp>>-
cpe:2.3:h:digi:one_sp:-:*:*:*:*:*:*:*
digi
digi
>>wr31_firmware>>-
cpe:2.3:o:digi:wr31_firmware:-:*:*:*:*:*:*:*
digi
digi
>>wr31>>-
cpe:2.3:h:digi:wr31:-:*:*:*:*:*:*:*
digi
digi
>>transport_wr11_xt_firmware>>-
cpe:2.3:o:digi:transport_wr11_xt_firmware:-:*:*:*:*:*:*:*
digi
digi
>>transport_wr11_xt>>-
cpe:2.3:h:digi:transport_wr11_xt:-:*:*:*:*:*:*:*
digi
digi
>>wr44_r_firmware>>-
cpe:2.3:o:digi:wr44_r_firmware:-:*:*:*:*:*:*:*
digi
digi
>>wr44_r>>-
cpe:2.3:h:digi:wr44_r:-:*:*:*:*:*:*:*
digi
digi
>>wr21_firmware>>-
cpe:2.3:o:digi:wr21_firmware:-:*:*:*:*:*:*:*
digi
digi
>>wr21>>-
cpe:2.3:h:digi:wr21:-:*:*:*:*:*:*:*
digi
digi
>>connect_es_firmware>>Versions before 2.26.2.4(exclusive)
cpe:2.3:o:digi:connect_es_firmware:*:*:*:*:*:*:*:*
digi
digi
>>connect_es>>-
cpe:2.3:h:digi:connect_es:-:*:*:*:*:*:*:*
digi
digi
>>connect_sp_firmware>>-
cpe:2.3:o:digi:connect_sp_firmware:-:*:*:*:*:*:*:*
digi
digi
>>connect_sp>>-
cpe:2.3:h:digi:connect_sp:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-836Primaryics-cert@hq.dhs.gov
CWE ID: CWE-836
Type: Primary
Source: ics-cert@hq.dhs.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04ics-cert@hq.dhs.gov
Third Party Advisory
US Government Resource
https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdfics-cert@hq.dhs.gov
Vendor Advisory
Hyperlink: https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
Source: ics-cert@hq.dhs.gov
Resource:
Third Party Advisory
US Government Resource
Hyperlink: https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf
Source: ics-cert@hq.dhs.gov
Resource:
Vendor Advisory

Change History

0
Information is not available yet

Similar CVEs

2Records found
CVE-2021-35979
Matching Score-8
Assigner-MITRE Corporation
ShareView Details
Matching Score-8
Assigner-MITRE Corporation
CVSS Score-8.1||HIGH
EPSS-0.86% / 54.44%
||
7 Day CHG~0.00%
Published-08 Oct, 2021 | 14:21
Updated-04 Aug, 2024 | 00:47
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication.

Action-Not Available
Vendor-digin/a
Product-connectport_lts_8\/16\/32connectport_lts_8\/16\/32_firmwareportserver_tsportserver_ts_m_meiconnect_eswr31portserver_ts_mei_hardenedone_iap_family_firmwaretransport_wr11_xtcmtransport_wr11_xt_firmwarepassport_integrated_console_server_firmware6350-sr_firmwareportserver_ts_p_mei_firmwarewr44_rportserver_ts_firmwareone_iawr216350-srconnectport_ts_8\/16_firmwareone_iap_familyconnectport_ts_8\/16cm_firmwarewr21_firmwareportserver_ts_p_meipassport_integrated_console_serverwr31_firmwareportserver_ts_mei_hardened_firmwarewr44_r_firmwareconnect_es_firmwareportserver_ts_meione_ia_firmwarerealportportserver_ts_mei_firmwareportserver_ts_m_mei_firmwaren/a
CWE ID-CWE-306
Missing Authentication for Critical Function
CVE-2026-9222
Matching Score-4
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
ShareView Details
Matching Score-4
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
CVSS Score-9.2||CRITICAL
EPSS-0.24% / 15.43%
||
7 Day CHG~0.00%
Published-25 Jun, 2026 | 23:29
Updated-26 Jun, 2026 | 20:08
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Setracker2 Children's Smartwatch Ecosystem Use of password hash instead of password for authentication

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could allow an attacker, who knows the hash, to authenticate and gain full access.

Action-Not Available
Vendor-Shenzhen i365-Tech Co. Ltd.
Product-Setracker2 Parental Control App (Android) package com.tgelec.setracker
CWE ID-CWE-836
Use of Password Hash Instead of Password for Authentication
Details not found