Digi One Iap Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Digi One Iap Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-36767 — CVSS 9.8 (critical): In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making…
• CVE-2023-4299 — CVSS 9.0 (critical): Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.