ICSA-23-243-04: Digi realport for windows vulnerability
Affected Software
21 affected components
Digi International, Inc. Digi RealPort for Windows: version 4.8.488.0 and earlier
Digi International, Inc. Digi RealPort for Linux: version 1.9-40 and earlier
Digi International, Inc. Digi ConnectPort TS 8/16: versions prior to 2.26.2.4
Digi International, Inc. Digi Passport Console Server: all versions
Digi International, Inc. Digi ConnectPort LTS 8/16/32: versions prior to 1.4.9
Digi International, Inc. Digi CM Console Server: all versions
Digi International, Inc. Digi PortServer TS: all versions
Digi International, Inc. Digi PortServer TS MEI: all versions
Digi International, Inc. Digi PortServer TS MEI Hardened: all versions
Digi International, Inc. Digi PortServer TS M MEI: all versions
Digi International, Inc. Digi PortServer TS P MEI: all versions
Digi International, Inc. Digi One IAP Family: all versions
Digi International, Inc. Digi One IA: all versions
Digi International, Inc. Digi One SP IA: all versions
Digi International, Inc. Digi One SP: all versions
Digi International, Inc. Digi WR31: all versions
Digi International, Inc. Digi WR11 XT: all versions
Digi International, Inc. Digi WR44 R: all versions
Digi International, Inc. Digi WR21: all versions
Digi International, Inc. Digi Connect ES: versions prior to 2.26.2.4
Digi International, Inc. Digi Connect SP: all versions
Event History
Feb 25, 2025
Advisory Published
08:31 PM
Frequently Asked Questions
1
What is the severity of ICSA-23-243-04?
The severity of ICSA-23-243-04 is categorized as high due to potential exploitation leading to unauthorized access.
2
How do I fix ICSA-23-243-04?
To fix ICSA-23-243-04, update to the latest versions of the affected Digi products as specified in the advisory.
3
What products are affected by ICSA-23-243-04?
ICSA-23-243-04 affects several Digi products including Digi RealPort for Windows, Digi ConnectPort series, and Digi Passport Console Server among others.
4
What are the risks of not addressing ICSA-23-243-04?
Not addressing ICSA-23-243-04 could lead to serious security vulnerabilities allowing unauthorized access to critical systems.
5
Is there a mitigation strategy for ICSA-23-243-04?
Implementing network segmentation and access controls can serve as a mitigation strategy until the affected products are updated.