CVE-2023-4299
First published: Thu Aug 31 2023(Updated: )
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Digi Realport | <=1.9-40 | |
| Digi Realport | <=4.8.488.0 | |
| Digi Connectport Ts 8\/16 Firmware | <2.26.2.4 | |
| Digi Connectport Ts 8\/16 | ||
| Digi Passport Firmware | ||
| Digi Passport | ||
| Digi Connectport Lts 8\/16\/32 Firmware | <1.4.9 | |
| Digi Connectport Lts 8\/16\/32 | ||
| Digi Cm Firmware | ||
| Digi Cm | ||
| Digi Portserver Ts Firmware | ||
| Digi Portserver Ts | ||
| Digi Portserver Ts Mei Firmware | ||
| Digi Portserver Ts Mei | ||
| Digi Portserver Ts Mei Hardened Firmware | ||
| Digi Portserver Ts Mei Hardened | ||
| Digi Portserver Ts M Mei Firmware | ||
| Digi Portserver Ts M Mei | ||
| Digi Portserver Ts P Mei Firmware | ||
| Digi Portserver Ts P Mei | ||
| Digi One Iap Firmware | ||
| Digi One Iap | ||
| Digi One Ia Firmware | ||
| Digi One Ia | ||
| Digi One Sp Ia Firmware | ||
| Digi One Sp Ia | ||
| Digi One Sp Firmware | ||
| Digi One Sp | ||
| Digi Wr31 Firmware | ||
| Digi Wr31 | ||
| Digi Transport Wr11 Xt Firmware | ||
| Digi Transport Wr11 Xt | ||
| Digi Wr44 R Firmware | ||
| Digi Wr44 R | ||
| Digi Wr21 Firmware | ||
| Digi Wr21 | ||
| Digi Connect Es Firmware | <2.26.2.4 | |
| Digi Connect Es | ||
| Digi Connect Sp Firmware | ||
| Digi Connect Sp |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-4299.
What is the severity level of CVE-2023-4299?
The severity level of CVE-2023-4299 is critical, with a severity value of 8.1.
What is the affected software of CVE-2023-4299?
The affected software of CVE-2023-4299 includes Digi RealPort Protocol, Digi Connectport Ts 8/16 Firmware, Digi Connectport Lts 8/16/32 Firmware, Digi Cm Firmware, Digi Portserver Ts Firmware, Digi Portserver Ts Mei Firmware, Digi Portserver Ts Mei Hardened Firmware, Digi Portserver Ts M Mei Firmware, Digi Portserver Ts P Mei Firmware, Digi One Iap Firmware, Digi One Ia Firmware, Digi One Sp Ia Firmware, Digi One Sp Firmware, Digi Wr31 Firmware, Digi Transport Wr11 Xt Firmware, Digi Wr44 R Firmware, Digi Wr21 Firmware, Digi Connect Es Firmware, and Digi Connect Sp Firmware.
How does the vulnerability impact the affected software?
The vulnerability allows an attacker to perform a replay attack and bypass authentication to access connected equipment.
Where can I find more information about CVE-2023-4299?
You can find more information about CVE-2023-4299 at the following references: [Reference 1](https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04), [Reference 2](https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf).
- collector/nvd-api
- collector/nvd-index
- agent/tags
- agent/type
- agent/event
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/digi
- canonical/digi realport
- version/digi realport/1.9-40
- version/digi realport/4.8.488.0
- canonical/digi connectport ts 8\/16 firmware
- canonical/digi connectport ts 8\/16
- canonical/digi passport firmware
- canonical/digi passport
- canonical/digi connectport lts 8\/16\/32 firmware
- canonical/digi connectport lts 8\/16\/32
- canonical/digi cm firmware
- canonical/digi cm
- canonical/digi portserver ts firmware
- canonical/digi portserver ts
- canonical/digi portserver ts mei firmware
- canonical/digi portserver ts mei
- canonical/digi portserver ts mei hardened firmware
- canonical/digi portserver ts mei hardened
- canonical/digi portserver ts m mei firmware
- canonical/digi portserver ts m mei
- canonical/digi portserver ts p mei firmware
- canonical/digi portserver ts p mei
- canonical/digi one iap firmware
- canonical/digi one iap
- canonical/digi one ia firmware
- canonical/digi one ia
- canonical/digi one sp ia firmware
- canonical/digi one sp ia
- canonical/digi one sp firmware
- canonical/digi one sp
- canonical/digi wr31 firmware
- canonical/digi wr31
- canonical/digi transport wr11 xt firmware
- canonical/digi transport wr11 xt
- canonical/digi wr44 r firmware
- canonical/digi wr44 r
- canonical/digi wr21 firmware
- canonical/digi wr21
- canonical/digi connect es firmware
- canonical/digi connect es
- canonical/digi connect sp firmware
- canonical/digi connect sp