CVE-2021-35979
An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication.
- Score
- CVSS 3.1 8.1 High
- Status
- Modified - cve@mitre.org
- Published
- 2021-10-08
- Last modified
- 2024-08-04
- Weaknesses
- CWE-306
Affected products
- 6350-sr Firmware (Digi)
- Cm Firmware (Digi)
- Connect Es Firmware (Digi)
- Connectport Lts 8/16/32 Firmware (Digi)
- Connectport Ts 8/16 Firmware (Digi)
- One Ia Firmware (Digi)
- One Iap Family Firmware (Digi)
- Passport Integrated Console Server Firmware (Digi)
- Portserver Ts Firmware (Digi)
- Portserver Ts M Mei Firmware (Digi)
- Portserver Ts Mei Firmware (Digi)
- Portserver Ts Mei Hardened Firmware (Digi)
- Portserver Ts P Mei Firmware (Digi)
- Realport (Digi)
- Transport Wr11 Xt Firmware (Digi)
- Wr21 Firmware (Digi)
- Wr31 Firmware (Digi)
- Wr44 R Firmware (Digi)
References
- https://raw.githubusercontent.com/reidmefirst/vuln-disclosure/main/2021-02.txt
