CVE-2023-4299 Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication
Attackers can bypass authentication via replay attacks using password hashes, gaining unauthorized access to connected equipment.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-4299?
CVE-2023-4299 is a critical authentication bypass vulnerability in Digi 6350-SR, published on 31 Aug 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
Weakness: CWE-836
Which versions are affected by CVE-2023-4299?
It affects 20 products.
Products include Digi Cm Firmware, Digi Connect Es Firmware, Digi Connect Sp Firmware, Digi Connectport Lts 8\/16\/32 Firmware, Digi Connectport Ts 8\/16 Firmware, Digi One Ia Firmware and 14 more.
How do I fix CVE-2023-4299?
No fix has been published for CVE-2023-4299 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-4299 being exploited?
There is no known exploitation of CVE-2023-4299 in the wild and no public exploit code.
Sources
Also known as GHSA-6mw3-9jr4-xc73.