1. Home
  2. CVE Database
  3. CVE-2021-35977
CRITICAL · 9.8

CVE-2021-35977

An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution.

Vulnerability Description

An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DigiRealport<= 1.9-40
DigiConnectport Ts 8\/16 FirmwareAll versions
DigiConnectport Ts 8\/16-
DigiConnectport Lts 8\/16\/32 FirmwareAll versions
DigiConnectport Lts 8\/16\/32-
DigiPassport Integrated Console Server FirmwareAll versions
DigiPassport Integrated Console Server-
DigiCm FirmwareAll versions
DigiCm-
DigiPortserver Ts FirmwareAll versions
DigiPortserver Ts-
DigiPortserver Ts Mei FirmwareAll versions
DigiPortserver Ts Mei-
DigiPortserver Ts Mei Hardened FirmwareAll versions
DigiPortserver Ts Mei Hardened-
DigiPortserver Ts M Mei FirmwareAll versions
DigiPortserver Ts M Mei-
Digi6350-Sr FirmwareAll versions
Digi6350-Sr-
DigiPortserver Ts P Mei FirmwareAll versions

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2021-35977?

CVE-2021-35977 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution.

How severe is CVE-2021-35977?

CVE-2021-35977 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-35977?

Check the references section above for vendor advisories and patch information. Affected products include: Digi Realport, Digi Connectport Ts 8\/16 Firmware, Digi Connectport Ts 8\/16, Digi Connectport Lts 8\/16\/32 Firmware, Digi Connectport Lts 8\/16\/32.