HIGH🇵🇱 Wersja polska

CVE-2021-37188

CVSS 8.8v3.1pub. 2021-12-10upd. 2024-11-21

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is authentic), changing the behavior of the gateway.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Digi Transport Dr64

    HW
    Digi
    all versions

  • Digi Transport Dr64 Firmware

    OS
    Digi
    ≤ 5.2.4.9

  • Digi Transport Sr44

    HW
    Digi
    all versions

  • Digi Transport Vc74

    HW
    Digi
    all versions

  • Digi Transport Vc74 Firmware

    OS
    Digi
    ≤ 5.2.4.9

  • Digi Transport Wr11

    HW
    Digi
    all versions

  • Digi Transport Wr11 Firmware

    OS
    Digi
    ≤ 8.2.1.3

  • Digi Transport Wr11 Xt

    HW
    Digi
    all versions

  • Digi Transport Wr11 Xt Firmware

    OS
    Digi
    ≤ 8.2.1.3

  • Digi Transport Wr21

    HW
    Digi
    all versions

  • Digi Transport Wr21 Firmware

    OS
    Digi
    ≤ 8.2.1.3

  • Digi Transport Wr31

    HW
    Digi
    all versions

  • Digi Transport Wr31 Firmware

    OS
    Digi
    ≤ 8.2.1.3

  • Digi Transport Wr41

    HW
    Digi
    all versions

  • Digi Transport Wr41 Firmware

    OS
    Digi
    8.0.0.0 – 8.3.1.25.0.0.0 – 5.2.4.66.0.0.0 – 6.1.3.5

  • Digi Transport Wr44

    HW
    Digi
    v2

  • Digi Transport Wr44 Firmware

    OS
    Digi
    ≤ 8.3.1.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-4299CRITICAL9.0PL ✓same product

Digi RealPort Protocol — podatność na atak replay umożliwiająca ominięcie uwierzytelnienia

CVE-2021-35978CRITICAL9.8PL ✓same product

RCE z uprawnieniami SUPER w protokole ZING urządzeń Digi TransPort

CVE-2021-36767CRITICAL9.8PL ✓same product

Digi RealPort — słabe haszowanie hasła umożliwia nieautoryzowany dostęp

CVE-2021-35977CRITICAL9.8PL ✓same product

Buffer overflow w Digi RealPort — wykonanie dowolnego kodu przez ADDP

CVE-2021-37189HIGH7.5same product

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribu...