One Iap Haz Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:digi:one_iap_haz_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Digi (06e695c7-8864-5e4e-a0e0-7109e4ba48e8) |
|---|---|
| Product | One Iap Haz Firmware (331830f8-2f54-5ccc-a430-3690ddf09429) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36767 |
vulnerable | 2026-06-08 05:32:52.486750 |
Details available
In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server.
Published: 2021-10-08T14:22:57.000Z
Updated: 2024-08-04T01:01:59.227Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.