Vulnerabilities > Digi > ONE IAP HAZ Firmware

DATE CVE VULNERABILITY TITLE RISK
2021-10-08 CVE-2021-36767 Use of Password Hash With Insufficient Computational Effort vulnerability in Digi products
In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective.
network
low complexity
digi CWE-916
critical
 9.8
9.8