Critical severity9.8NVD Advisory· Published Oct 8, 2021· Updated Jun 17, 2026
CVE-2021-36767
CVE-2021-36767
Description
In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22cpe:2.3:a:digi:realport:*:*:*:*:*:linux:*:*+ 2 more
- cpe:2.3:a:digi:realport:*:*:*:*:*:linux:*:*range: <=1.9-40
- cpe:2.3:a:digi:realport:*:*:*:*:*:windows:*:*range: <=4.10.490
- (no CPE)range: <=4.10.490
- cpe:2.3:o:digi:connectport_ts_8\/16_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:connectport_lts_8\/16\/32_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:passport_integrated_console_server_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:cm_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_mei_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_mei_hardened_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_m_mei_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:6350-sr_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_p_mei_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:transport_wr11_xt_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:one_ia_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:wr31_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:wr44_r_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:connect_es_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:wr21_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:one_iap_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:digi:one_iap_haz_firmware:*:*:*:*:*:*:*:*
- Digi/RealPortdescription
Patches
Vulnerability mechanics
References
1- raw.githubusercontent.com/reidmefirst/vuln-disclosure/main/2021-02.txtnvdThird Party Advisory
News mentions
0No linked articles in our index yet.