Vulnerability-Lookup

VAR-202308-3626

Vulnerability from variot - Updated: 2024-08-14 14:17

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment. Digi International Provided by Digi RealPort Protocol The following vulnerabilities exist in. It was * Authentication using password hashes instead of passwords (CWE-836) - CVE-2023-4299If the vulnerability is exploited, it may be affected as follows. It was * Authentication is bypassed and connected devices are accessed by a remote third party

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202308-3626",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "portserver ts p mei",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "connectport ts 8\\/16",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "digi",
        "version": "2.26.2.4"
      },
      {
        "model": "wr31",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "connect sp",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "one ia",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "realport",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "digi",
        "version": "1.9-40"
      },
      {
        "model": "portserver ts mei hardened",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "one iap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "portserver ts mei",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "portserver ts m mei",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "wr44 r",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "transport wr11 xt",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "portserver ts",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "connect es",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "digi",
        "version": "2.26.2.4"
      },
      {
        "model": "wr21",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "cm",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "one sp ia",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "one sp",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "realport",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "digi",
        "version": "4.8.488.0"
      },
      {
        "model": "connectport lts 8\\/16\\/32",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "digi",
        "version": "1.4.9"
      },
      {
        "model": "passport",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "connectport ts 8/16",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "transport wr31",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "connect es",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "portserver ts",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "transport wr11xt",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "portserver ts mei hardened",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "connect sp",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "one ia",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "portserver ts p mei",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "one iap family",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "connectport lts 8/16/32",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "one sp ia",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "portserver ts m mei",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "passport console server",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "realport",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "transport wr21",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "one sp",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "portserver ts mei",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "transport wr44 r",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      },
      {
        "model": "cm console server",
        "scope": null,
        "trust": 0.8,
        "vendor": "digi",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4299"
      }
    ]
  },
  "cve": "CVE-2023-4299",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.2,
            "id": "CVE-2023-4299",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "ics-cert@hq.dhs.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.2,
            "id": "CVE-2023-4299",
            "impactScore": 6.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "High",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 8.1,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2023-4299",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2023-4299",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "ics-cert@hq.dhs.gov",
            "id": "CVE-2023-4299",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2023-4299",
            "trust": 0.8,
            "value": "High"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4299"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4299"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "\nDigi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment. Digi International Provided by Digi RealPort Protocol The following vulnerabilities exist in. It was * Authentication using password hashes instead of passwords (CWE-836) - CVE-2023-4299If the vulnerability is exploited, it may be affected as follows. It was * Authentication is bypassed and connected devices are accessed by a remote third party",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2023-4299"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      },
      {
        "db": "VULMON",
        "id": "CVE-2023-4299"
      }
    ],
    "trust": 1.71
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2023-4299",
        "trust": 2.7
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-23-243-04",
        "trust": 1.9
      },
      {
        "db": "JVN",
        "id": "JVNVU92217208",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551",
        "trust": 0.8
      },
      {
        "db": "VULMON",
        "id": "CVE-2023-4299",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2023-4299"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4299"
      }
    ]
  },
  "id": "VAR-202308-3626",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 1.0
  },
  "last_update_date": "2024-08-14T14:17:00.104000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "RealPort\u00a0CVEs\u00a0(PDF)",
        "trust": 0.8,
        "url": "https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-836",
        "trust": 1.0
      },
      {
        "problemtype": "Authentication using password hashes instead of passwords (CWE-836) [ others ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4299"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.9,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04"
      },
      {
        "trust": 1.1,
        "url": "https://www.digi.com/getattachment/resources/security/alerts/realport-cves/dragos-disclosure-statement.pdf"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu92217208/index.html"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2023-4299"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/836.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2023-4299"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4299"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULMON",
        "id": "CVE-2023-4299"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-4299"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-08-31T00:00:00",
        "db": "VULMON",
        "id": "CVE-2023-4299"
      },
      {
        "date": "2023-09-12T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      },
      {
        "date": "2023-08-31T21:15:09.183000",
        "db": "NVD",
        "id": "CVE-2023-4299"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-09-01T00:00:00",
        "db": "VULMON",
        "id": "CVE-2023-4299"
      },
      {
        "date": "2024-06-13T07:29:00",
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      },
      {
        "date": "2023-09-06T20:13:32.917000",
        "db": "NVD",
        "id": "CVE-2023-4299"
      }
    ]
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Digi\u00a0International\u00a0 Made \u00a0RealPort\u00a0Protocol\u00a0 Authentication vulnerability using password hashes instead of passwords in",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-003551"
      }
    ],
    "trust": 0.8
  }
}

CVE-2023-4299 (GCVE-0-2023-4299)

Vulnerability from cvelistv5 – Published: 2023-08-31 20:45 – Updated: 2025-01-16 21:30

Title

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

Summary

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

Severity

9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-16 21:20 UTC

CWE

CWE-836

Assigner

icscert CNA under the icscert root

CNA scorecard C 75/100 over 351 records in the last 180 days details

References

2 references

URL	Tags
https://www.cisa.gov/news-events/ics-advisories/i…
https://www.digi.com/getattachment/resources/secu…

Impacted products

23 products

Vendor	Product	Version
Digi International	Digi RealPort	Affected: 0 , ≤ 4.8.488.0 (custom)
Digi International	Digi RealPort	Affected: 0 , ≤ 1.9-40 (custom)
Digi International	Digi ConnectPort TS 8/16	Affected: 0 , < 2.26.2.4 (custom)
Digi International	Digi Passport Console Server	Affected: all versions
Digi International	Digi ConnectPort LTS 8/16/32	Affected: 0 , < 1.4.9 (custom)
Digi International	Digi CM Console Server	Affected: all versions
Digi International	Digi PortServer TS	Affected: all versions
Digi International	Digi PortServer TS MEI	Affected: all versions
Digi International	Digi PortServer TS MEI Hardened	Affected: all versions
Digi International	Digi PortServer TS M MEI	Affected: all versions
Digi International	Digi PortServer TS P MEI	Affected: all versions
Digi International	Digi One IAP Family	Affected: all versions
Digi International	Digi One IA	Affected: all versions
Digi International	Digi One SP IA	Affected: all versions
Digi International	Digi One SP	Affected: all versions
Digi International	Digi WR31	Affected: all versions
Digi International	Digi WR11 XT	Affected: all versions
Digi International	Digi WR44 R	Affected: all versions
Digi International	Digi WR21	Affected: all versions
Digi International	Digi Connect ES	Affected: 0 , < 2.26.2.4 (custom)
Digi International	Digi Connect SP	Affected: all versions
Digi International	Digi 6350-SR	Unaffected: all versions
Digi International	Digi ConnectCore 8X products	Unaffected: all versions

Date Public

2023-08-31 20:29

Credits

Reid Wightman of Dragos, Inc reported this vulnerability to Digi International.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:24:04.616Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-4299",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-16T21:20:30.564576Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-16T21:30:37.810Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Digi RealPort",
          "vendor": "Digi International ",
          "versions": [
            {
              "lessThanOrEqual": "4.8.488.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "Digi RealPort",
          "vendor": "Digi International ",
          "versions": [
            {
              "lessThanOrEqual": "1.9-40",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi ConnectPort TS 8/16",
          "vendor": "Digi International ",
          "versions": [
            {
              "lessThan": "2.26.2.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi Passport Console Server",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi ConnectPort LTS 8/16/32",
          "vendor": "Digi International ",
          "versions": [
            {
              "lessThan": "1.4.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi CM Console Server",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi PortServer TS",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi PortServer TS MEI",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi PortServer TS MEI Hardened",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi PortServer TS M MEI",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi PortServer TS P MEI",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi One IAP Family",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi One IA",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi One SP IA",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "\u200bDigi One SP",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi WR31",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi WR11 XT",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi WR44 R",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi WR21",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi Connect ES",
          "vendor": "Digi International ",
          "versions": [
            {
              "lessThan": "2.26.2.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi Connect SP",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi 6350-SR",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "unaffected",
              "version": "all versions"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Digi ConnectCore 8X products",
          "vendor": "Digi International ",
          "versions": [
            {
              "status": "unaffected",
              "version": "all versions"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Reid Wightman of Dragos, Inc reported this vulnerability to Digi International."
        }
      ],
      "datePublic": "2023-08-31T20:29:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eDigi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.\u003c/span\u003e\n\n"
            }
          ],
          "value": "\nDigi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.\n\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-836",
              "description": "CWE-836",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-31T20:45:43.866Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-04"
        },
        {
          "url": "https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cp\u003eDigi International recommends users acquire and install patches that they have made available for the following products:\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u200bRealPort software for Windows: Fixed in 4.10.490\u003c/li\u003e\u003cli\u003e\u200bDigi ConnectPort TS 8/16: Fixed in firmware version 2.26.2.4\u003c/li\u003e\u003cli\u003e\u200bDigi ConnectPort LTS 8/16/32: Fixed in version 1.4.9\u003c/li\u003e\u003cli\u003e\u200bDigi Connect ES: Fixed in firmware version 2.26.2.4\u003c/li\u003e\u003c/ul\u003e\u003cp\u003e\u200bFor more information, see the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf\"\u003ecustomer notification document\u003c/a\u003e\u0026nbsp;published by Digi International.\u003c/p\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "\nDigi International recommends users acquire and install patches that they have made available for the following products:\n\n  *  \u200bRealPort software for Windows: Fixed in 4.10.490\n  *  \u200bDigi ConnectPort TS 8/16: Fixed in firmware version 2.26.2.4\n  *  \u200bDigi ConnectPort LTS 8/16/32: Fixed in version 1.4.9\n  *  \u200bDigi Connect ES: Fixed in firmware version 2.26.2.4\n\n\n\u200bFor more information, see the  customer notification document https://www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdf \u00a0published by Digi International.\n\n\n\n\n"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cp\u003eDragos recommends restricting access to Digi devices on TCP/771 (default) or TCP/1027 (if encryption is enabled, this is the default port). Only allow the workstations which initiate RealPort connections to communicate to the field equipment on those ports. Note that most of Digi\u0027s devices allow you to change the setting for which TCP port the RealPort service runs on, so end users should consult their device configuration and restrict access to the configured port if it is not the default.\u003c/p\u003e\u003cp\u003e\u200bIf using the system in \u0027reverse\u0027 mode, where the Digi device calls back to the Windows or Linux workstation, then Dragos recommends restricting access to the workstation on TCP/771 or TCP/1027 to known Digi RealPort devices on your network. This port may be configured by end users, so consult the workstation and device configurations to ensure coverage.\u003c/p\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "\nDragos recommends restricting access to Digi devices on TCP/771 (default) or TCP/1027 (if encryption is enabled, this is the default port). Only allow the workstations which initiate RealPort connections to communicate to the field equipment on those ports. Note that most of Digi\u0027s devices allow you to change the setting for which TCP port the RealPort service runs on, so end users should consult their device configuration and restrict access to the configured port if it is not the default.\n\n\u200bIf using the system in \u0027reverse\u0027 mode, where the Digi device calls back to the Windows or Linux workstation, then Dragos recommends restricting access to the workstation on TCP/771 or TCP/1027 to known Digi RealPort devices on your network. This port may be configured by end users, so consult the workstation and device configurations to ensure coverage.\n\n\n\n\n"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2023-4299",
    "datePublished": "2023-08-31T20:45:43.866Z",
    "dateReserved": "2023-08-10T20:14:27.489Z",
    "dateUpdated": "2025-01-16T21:30:37.810Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

VAR-202308-3626

CVE-2023-4299 (GCVE-0-2023-4299)

Tags

Sightings

Nomenclature

Related by attack behaviour