CVE-2023-4299

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Aug 31, 2023
Source updated: Jan 16, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Digi RealPort

Vendor: Digi International
Product: Digi RealPort
Platforms: Windows
Default status: unaffected

Digi RealPort · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.8.488.0	None listed

Digi RealPort

Vendor: Digi International
Product: Digi RealPort
Platforms: Linux
Default status: unaffected

Digi RealPort · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.9-40	None listed

Digi ConnectPort TS 8/16

Vendor: Digi International
Product: Digi ConnectPort TS 8/16
Platforms: Unknown
Default status: unaffected

Digi ConnectPort TS 8/16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.26.2.4	Unavailable	None listed

Digi Passport Console Server

Vendor: Digi International
Product: Digi Passport Console Server
Platforms: Unknown
Default status: unaffected

Digi Passport Console Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi ConnectPort LTS 8/16/32

Vendor: Digi International
Product: Digi ConnectPort LTS 8/16/32
Platforms: Unknown
Default status: unaffected

Digi ConnectPort LTS 8/16/32 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	1.4.9	Unavailable	None listed

Digi CM Console Server

Vendor: Digi International
Product: Digi CM Console Server
Platforms: Unknown
Default status: unaffected

Digi CM Console Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi PortServer TS

Vendor: Digi International
Product: Digi PortServer TS
Platforms: Unknown
Default status: unaffected

Digi PortServer TS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi PortServer TS MEI

Vendor: Digi International
Product: Digi PortServer TS MEI
Platforms: Unknown
Default status: unaffected

Digi PortServer TS MEI · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi PortServer TS MEI Hardened

Vendor: Digi International
Product: Digi PortServer TS MEI Hardened
Platforms: Unknown
Default status: unaffected

Digi PortServer TS MEI Hardened · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi PortServer TS M MEI

Vendor: Digi International
Product: Digi PortServer TS M MEI
Platforms: Unknown
Default status: unaffected

Digi PortServer TS M MEI · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi PortServer TS P MEI

Vendor: Digi International
Product: Digi PortServer TS P MEI
Platforms: Unknown
Default status: unaffected

Digi PortServer TS P MEI · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi One IAP Family

Vendor: Digi International
Product: Digi One IAP Family
Platforms: Unknown
Default status: unaffected

Digi One IAP Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi One IA

Vendor: Digi International
Product: Digi One IA
Platforms: Unknown
Default status: unaffected

Digi One IA · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi One SP IA

Vendor: Digi International
Product: Digi One SP IA
Platforms: Unknown
Default status: unaffected

Digi One SP IA · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi One SP

Vendor: Digi International
Product: Digi One SP
Platforms: Unknown
Default status: unaffected

Digi One SP · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi WR31

Vendor: Digi International
Product: Digi WR31
Platforms: Unknown
Default status: unaffected

Digi WR31 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi WR11 XT

Vendor: Digi International
Product: Digi WR11 XT
Platforms: Unknown
Default status: unaffected

Digi WR11 XT · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi WR44 R

Vendor: Digi International
Product: Digi WR44 R
Platforms: Unknown
Default status: unaffected

Digi WR44 R · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi WR21

Vendor: Digi International
Product: Digi WR21
Platforms: Unknown
Default status: unaffected

Digi WR21 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi Connect ES

Vendor: Digi International
Product: Digi Connect ES
Platforms: Unknown
Default status: unaffected

Digi Connect ES · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.26.2.4	Unavailable	None listed

Digi Connect SP

Vendor: Digi International
Product: Digi Connect SP
Platforms: Unknown
Default status: unaffected

Digi Connect SP · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

Digi 6350-SR

Vendor: Digi International
Product: Digi 6350-SR
Platforms: Unknown
Default status: unaffected

Digi 6350-SR · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

Digi ConnectCore 8X products

Vendor: Digi International
Product: Digi ConnectCore 8X products
Platforms: Unknown
Default status: unaffected

Digi ConnectCore 8X products · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all versions	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

CVE-2023-4299

CNA source text (English)

Scoped product and version facts

Digi RealPort

Digi RealPort

Digi ConnectPort TS 8/16

Digi Passport Console Server

Digi ConnectPort LTS 8/16/32

Digi CM Console Server

Digi PortServer TS

Digi PortServer TS MEI

Digi PortServer TS MEI Hardened

Digi PortServer TS M MEI

Digi PortServer TS P MEI

Digi One IAP Family

Digi One IA

Digi One SP IA

​Digi One SP

Digi WR31

Digi WR11 XT

Digi WR44 R

Digi WR21

Digi Connect ES

Digi Connect SP

Digi 6350-SR

Digi ConnectCore 8X products

Digi One SP