Digi One IAP
Approved changes feed: RSS · Atom
cpe:2.3:h:digi:one_iap:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Digi (06e695c7-8864-5e4e-a0e0-7109e4ba48e8) |
|---|---|
| Product | One Iap (a87ebd31-5558-57dd-9084-a908c63e025b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4299 |
not_vulnerable | 2026-06-08 06:16:12.068060 |
Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication
CRITICAL (9)
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
Published: 2023-08-31T20:45:43.866Z
Updated: 2025-01-16T21:30:37.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36767 |
not_vulnerable | 2026-06-08 05:32:52.485989 |
Details available
In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server.
Published: 2021-10-08T14:22:57.000Z
Updated: 2024-08-04T01:01:59.227Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.