Cm Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:digi:cm_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Digi (06e695c7-8864-5e4e-a0e0-7109e4ba48e8) |
|---|---|
| Product | Cm Firmware (57910320-eec7-5cec-8f46-a823d1b08b6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36767 |
vulnerable | 2026-06-08 05:32:52.478767 |
Details available
In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server.
Published: 2021-10-08T14:22:57.000Z
Updated: 2024-08-04T01:01:59.227Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35979 |
vulnerable | 2026-06-08 05:32:49.537220 |
Details available
An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication.
Published: 2021-10-08T14:21:22.000Z
Updated: 2024-08-04T00:47:42.592Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35977 |
vulnerable | 2026-06-08 05:32:49.500775 |
Details available
An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution.
Published: 2021-10-08T14:19:04.000Z
Updated: 2024-08-04T00:47:43.502Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.