CVE-2023-4299: Digi Cm Firmware

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

Affected products

• Digi Cm Firmware: affected versions not specified
• Digi Connect Es Firmware: before 2.26.2.4 (fixed in 2.26.2.4)
• Digi Connect SP Firmware: affected versions not specified
• Digi Connectport LTS 8/16/32 Firmware: before 1.4.9 (fixed in 1.4.9)
• Digi Connectport Ts 8/16 Firmware: before 2.26.2.4 (fixed in 2.26.2.4)
• Digi One Ia Firmware: affected versions not specified
• Digi One Iap Firmware: affected versions not specified
• Digi One SP Firmware: affected versions not specified
• Digi One SP Ia Firmware: affected versions not specified
• Digi Passport Firmware: affected versions not specified
• Digi Portserver Ts Firmware: affected versions not specified
• Digi Portserver Ts M Mei Firmware: affected versions not specified
• Digi Portserver Ts Mei Firmware: affected versions not specified
• Digi Portserver Ts Mei Hardened Firmware: affected versions not specified
• Digi Portserver Ts P Mei Firmware: affected versions not specified
• Digi Realport: up to and including 1.9-40; up to and including 4.8.488.0
• Digi Transport WR11 Xt Firmware: affected versions not specified
• Digi WR21 Firmware: affected versions not specified
• Digi WR31 Firmware: affected versions not specified
• Digi WR44 R Firmware: affected versions not specified

Published 2023-08-31. Last modified 2026-06-17.