CVSS 3.1
8.1 highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-4299
High (8.1) in digi. EPSS 0.7% chance of exploitation in the next 30 days.
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
- CWE
- CWE-836
- Published
- Modified
- Record from
- the NVD, synced
Affected
- digi:cm_firmware
- digi:connect_es_firmware
- digi:connect_sp_firmware
- digi:connectport_lts_8\/16\/32_firmware
- digi:connectport_ts_8\/16_firmware
- digi:one_ia_firmware
- digi:one_iap_firmware
- digi:one_sp_firmware
- digi:one_sp_ia_firmware
- digi:passport_firmware
- digi:portserver_ts_firmware
- digi:portserver_ts_m_mei_firmware
- digi:portserver_ts_mei_firmware
- digi:portserver_ts_mei_hardened_firmware
- digi:portserver_ts_p_mei_firmware
- digi:realport
- digi:transport_wr11_xt_firmware
- digi:wr21_firmware
- digi:wr31_firmware
- digi:wr44_r_firmware
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
- https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04
- https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf