CVE-2021-35979
First published: Fri Oct 08 2021(Updated: )
An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Digi Realport | <=1.9-40 | |
| Digi Realport | <=4.8.488.0 | |
| Digi Connectport Ts 8\/16 Firmware | ||
| Digi Connectport Ts 8\/16 | ||
| Digi Connectport Lts 8\/16\/32 Firmware | ||
| Digi Connectport Lts 8\/16\/32 | ||
| Digi Passport Integrated Console Server Firmware | ||
| Digi Passport Integrated Console Server | ||
| Digi Cm Firmware | ||
| Digi Cm | ||
| Digi Portserver Ts Firmware | ||
| Digi Portserver Ts | ||
| Digi Portserver Ts Mei Firmware | ||
| Digi Portserver Ts Mei | ||
| Digi Portserver Ts Mei Hardened Firmware | ||
| Digi Portserver Ts Mei Hardened | ||
| Digi Portserver Ts M Mei Firmware | ||
| Digi Portserver Ts M Mei | ||
| Digi 6350-sr Firmware | ||
| Digi 6350-sr | ||
| Digi Portserver Ts P Mei Firmware | ||
| Digi Portserver Ts P Mei | ||
| Digi Transport Wr11 Xt Firmware | ||
| Digi Transport Wr11 Xt | ||
| Digi One Iap Family Firmware | ||
| Digi One Iap Family | ||
| Digi One Ia Firmware | ||
| Digi One Ia | ||
| Digi Wr31 Firmware | ||
| Digi Wr31 | ||
| Digi Wr44 R Firmware | ||
| Digi Wr44 R | ||
| Digi Connect Es Firmware | ||
| Digi Connect Es | ||
| Digi Wr21 Firmware | ||
| Digi Wr21 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-35979?
CVE-2021-35979 is a vulnerability in Digi RealPort through 4.8.488.0 that allows man-in-the-middle attacks and lacks authentication in the 'encrypted' mode.
What is the severity of CVE-2021-35979?
CVE-2021-35979 has a severity rating of 8.1 (High).
Which software versions are affected by CVE-2021-35979?
Digi RealPort versions up to 4.8.488.0 on Linux and Windows are affected by CVE-2021-35979.
How can I fix CVE-2021-35979?
Currently, there is no fix or patch available for CVE-2021-35979. It is recommended to contact the vendor for further assistance.
Is Digi Connectport Ts 8/16 affected by CVE-2021-35979?
No, Digi Connectport Ts 8/16 is not vulnerable to CVE-2021-35979.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/digi
- canonical/digi realport
- version/digi realport/1.9-40
- version/digi realport/4.8.488.0
- canonical/digi connectport ts 8\/16 firmware
- canonical/digi connectport ts 8\/16
- canonical/digi connectport lts 8\/16\/32 firmware
- canonical/digi connectport lts 8\/16\/32
- canonical/digi passport integrated console server firmware
- canonical/digi passport integrated console server
- canonical/digi cm firmware
- canonical/digi cm
- canonical/digi portserver ts firmware
- canonical/digi portserver ts
- canonical/digi portserver ts mei firmware
- canonical/digi portserver ts mei
- canonical/digi portserver ts mei hardened firmware
- canonical/digi portserver ts mei hardened
- canonical/digi portserver ts m mei firmware
- canonical/digi portserver ts m mei
- canonical/digi 6350-sr firmware
- canonical/digi 6350-sr
- canonical/digi portserver ts p mei firmware
- canonical/digi portserver ts p mei
- canonical/digi transport wr11 xt firmware
- canonical/digi transport wr11 xt
- canonical/digi one iap family firmware
- canonical/digi one iap family
- canonical/digi one ia firmware
- canonical/digi one ia
- canonical/digi wr31 firmware
- canonical/digi wr31
- canonical/digi wr44 r firmware
- canonical/digi wr44 r
- canonical/digi connect es firmware
- canonical/digi connect es
- canonical/digi wr21 firmware
- canonical/digi wr21