Approved changes feed: RSS · Atom

cpe:2.3:h:digi:passport:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDigi (06e695c7-8864-5e4e-a0e0-7109e4ba48e8)
ProductPassport (9c80571f-69c5-55f0-8c7a-ea56d43082a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4299 not_vulnerable 2026-06-03 14:53:27.770609 Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication
CRITICAL (9)
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
Published: 2023-08-31T20:45:43.866Z
Updated: 2025-01-16T21:30:37.810Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26953 not_vulnerable 2026-06-03 14:46:45.430087 Details available
Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowing him to force an overflow when the string is concatenated to the HTML body.
Published: 2022-04-06T00:43:31.000Z
Updated: 2024-08-03T05:18:38.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26952 not_vulnerable 2026-06-03 14:46:45.429628 Details available
Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unauthenticated user is redirected to the authentication page.
Published: 2022-04-06T00:43:38.000Z
Updated: 2024-08-03T05:18:38.350Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.