An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication.
Affected Platforms
Digi Portserver Ts FirmwareDigi Portserver Ts M Mei FirmwareDigi Portserver Ts M MeiDigi 6350-SrDigi Portserver Ts Mei HardenedDigi Passport Integrated Console ServerDigi One Ia FirmwareDigi Portserver Ts MeiDigi Connectport Lts 8\/16\/32Digi Passport Integrated Console Server Firmware