Digi 6350-sr_firmware
3 CVEs affecting Digi 6350-sr_firmware. Latest disclosed: 2021-10-08. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-36767 | Critical | 9.8 | 2021-10-08 | In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection inef… |
CVE-2021-35977 | Critical | 9.8 | 2021-10-08 | An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This coul… |
CVE-2021-35979 | High | 8.1 | 2021-10-08 | An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication. |