Digi RealPort protocol (Digi console/terminal servers): RealPort is the protocol Digi console servers use to expose

Impact

RealPort is the protocol Digi console servers use to expose their serial ports as virtual COM ports over the network. Its authentication can be replayed — an attacker who captures a legitimate auth exchange (e.g. via a network tap or ARP spoof on the management VLAN) can replay it to open a session on connected serial equipment without knowing the real password.

Who can reach it

Requires network visibility into a RealPort authentication exchange (passive capture is enough) and the ability to send the replayed traffic to the target console server — no credential cracking needed.

What to do

Firmware/software upgrade on the RealPort driver and the console server firmware to a version with replay-resistant authentication; also a network-segmentation fix — RealPort traffic should never traverse a network segment an untrusted party can sniff. Rollout is a firmware flash per device plus a driver update on every host connecting to RealPort ports.

References