[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxPJMCkcCc4AVY9kNvMSyx4w-_k6cL8c6i_PwnTgaE9w":3,"g5a-ex:digi\u002Fcm@*":66,"g5a-family:digi\u002Fcm":68},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":43,"seoMetadata":44,"meta":63},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"digi","cm",1,4,0,"2023-08-31",[14],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"32",false,"Cm by Digi is a technology product with 1 tracked version and 4 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},[21,29,35,39],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2021-35977","An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution.","2021-10-08",9.8,"v3.1","Critical",0.01579,{"cveId":30,"description":31,"publishedDate":24,"cvssScore":32,"cvssVersion":26,"severity":33,"isKev":16,"epssScore":34},"CVE-2021-35979","An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication.",8.1,"High",0.00887,{"cveId":36,"description":37,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":38},"CVE-2021-36767","In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server.",0.00687,{"cveId":40,"description":41,"publishedDate":12,"cvssScore":32,"cvssVersion":26,"severity":33,"isKev":16,"epssScore":42},"CVE-2023-4299","\nDigi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.\n\n",0.0068,[],{"title":45,"metaDescription":46,"keywords":47,"structuredData":48},"Cm by Digi - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cm by Digi covering 1 version with 4 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cm vulnerabilities, Cm security, Cm CVE, Digi Cm, Cm threat intelligence, Digi security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":49,"@type":50,"name":51,"description":46,"url":52,"manufacturer":53,"applicationCategory":57,"softwareVersion":58,"mainEntity":59},"https:\u002F\u002Fschema.org","SoftwareApplication","Cm","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdigi\u002Fcm",{"@type":54,"name":55,"url":56},"Organization","Digi","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdigi","Security Software","1 versions tracked",{"@type":60,"name":61,"description":62,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Cm Security Vulnerabilities","Security vulnerabilities affecting Cm by Digi",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":64,"apiVersion":65},"2026-10-18T23:01:16.059Z","3.0",{"rows":67,"total":11,"capped":16,"failed":11},[],[69],{"product":70,"cves":10},"cm_firmware"]