CVE-2021-37189
Published Dec 10, 2021An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the use…
Vendor/product archive
digi / transport_wr11_xt CVEs
Beta · best-effort7 CVEs tagged to digi / transport_wr11_xt — 3 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2021-37188
Published Dec 10, 2021An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is aut…
CVE-2021-37187
Published Dec 10, 2021An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) from the device, which allows…
CVE-2021-35978
Published Dec 10, 2021An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges. This allows an attacker (with…
CVE-2021-36767
Published Oct 8, 2021In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker…
CVE-2021-35979
Published Oct 8, 2021An issue was discovered in Digi RealPort through 4.8.488.0. The 'encrypted' mode is vulnerable to man-in-the-middle attacks and does not perform authentication.
CVE-2021-35977
Published Oct 8, 2021An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrar…
Showing 1-7 of 7 CVEsPage 1 of 1