CVE-2023-4299

highPriorität · verfolgen · 32EPSS 0.007 · 52. PerzentilEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.68% (52nd) EPSS
CVSS 8.1 · high
Is it mine?
109 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenDigi Connect EScisa_csaf_ot

    Digi Connect ES: Fixed in firmware version 2.26.2.4

  • BehobenDigi ConnectPort LTS 8/16/32cisa_csaf_ot

    Digi ConnectPort LTS 8/16/32: Fixed in version 1.4.9

  • BehobenDigi ConnectPort TS 8/16cisa_csaf_ot

    Digi ConnectPort TS 8/16: Fixed in firmware version 2.26.2.4

  • MitigationDigi CM Console Servercisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi Connect EScisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi Connect SPcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi ConnectPort LTS 8/16/32cisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi ConnectPort TS 8/16cisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi One IAcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi One IAP Familycisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi One SPcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi One SP IAcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi Passport Console Servercisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TScisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TS M MEIcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TS MEIcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TS MEI Hardenedcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi PortServer TS P MEIcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi RealPort for Linuxcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi RealPort for Windowscisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi WR11 XTcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi WR21cisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi WR31cisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

  • MitigationDigi WR44 Rcisa_csaf_ot

    Digi International recommends users acquire and install patches that they have made available for the following products:

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.0
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.4–9

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.2 · Auswirkung 5.9
v3.09criticalCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · CISA US
v3.19criticalAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.19criticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU
v3.19criticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USAusnutzbarkeit 2.2 · Auswirkung 6
v3.17.4highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-836USCWE-836USCWE-836US
05

betroffene Produkte (109)

Betroffene Produkte und Versionsbereiche.

20 von 109 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

07

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2023-08-31geändert 2026-06-17
09

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan