ICSA-23-243-04

icsaUScisa_csaf_ot

Digi RealPort Protocol

view advisory published 2023-08-31

Successful exploitation of this vulnerability could allow the attacker to access connected equipment.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-4299UShigh8.1—
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
02

references

External citations — patches, advisories, analysis.

03

remediations (24)

  • MitigationDigi CM Console Server

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi Connect ES

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi Connect SP

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi ConnectPort LTS 8/16/32

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi ConnectPort TS 8/16

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi One IA

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi One IAP Family

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi One SP

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi One SP IA

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi Passport Console Server

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TS

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TS M MEI

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TS MEI

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TS MEI Hardened

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TS P MEI

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi RealPort for Linux

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi RealPort for Windows

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi WR11 XT

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi WR21

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi WR31

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi WR44 R

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • FixedDigi Connect ES

    Digi Connect ES: Fixed in firmware version 2.26.2.4

  • FixedDigi ConnectPort LTS 8/16/32

    Digi ConnectPort LTS 8/16/32: Fixed in version 1.4.9

  • FixedDigi ConnectPort TS 8/16

    Digi ConnectPort TS 8/16: Fixed in firmware version 2.26.2.4

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan