Vendor/product archive

digi / transport_wr31 CVEs

Beta · best-effort

4 CVEs tagged to digi / transport_wr31 — 1 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to digi vendor archive

CVE-2021-37189

Published Dec 10, 2021

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the use…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-37188

Published Dec 10, 2021

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is aut…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2021-37187

Published Dec 10, 2021

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) from the device, which allows…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-35978

Published Dec 10, 2021

An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges. This allows an attacker (with…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1