Critical severity9.0NVD Advisory· Published Aug 31, 2023· Updated Jun 17, 2026
CVE-2023-4299
CVE-2023-4299
Description
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23cpe:2.3:a:digi:realport:*:*:*:*:*:linux:*:*+ 1 more
- cpe:2.3:a:digi:realport:*:*:*:*:*:linux:*:*range: <=1.9-40
- cpe:2.3:a:digi:realport:*:*:*:*:*:windows:*:*range: <=4.8.488.0
- cpe:2.3:o:digi:cm_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:connect_es_firmware:*:*:*:*:*:*:*:*Range: <2.26.2.4
- cpe:2.3:o:digi:connect_sp_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:connectport_lts_8\/16\/32_firmware:*:*:*:*:*:*:*:*Range: <1.4.9
- cpe:2.3:o:digi:connectport_ts_8\/16_firmware:*:*:*:*:*:*:*:*Range: <2.26.2.4
- cpe:2.3:o:digi:one_ia_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:one_iap_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:one_sp_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:one_sp_ia_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:passport_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_m_mei_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_mei_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_mei_hardened_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:portserver_ts_p_mei_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:transport_wr11_xt_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:wr21_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:wr31_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:digi:wr44_r_firmware:-:*:*:*:*:*:*:*
- Range: all versions
Patches
Vulnerability mechanics
References
2- www.cisa.gov/news-events/ics-advisories/icsa-23-243-04nvdThird Party AdvisoryUS Government Resource
- www.digi.com/getattachment/resources/security/alerts/realport-cves/Dragos-Disclosure-Statement.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.