Latest digi transport wr21 firmware Vulnerabilities

● CVE-2021-37187

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) from the device, which allows decoding of other use...

Digi Transport Dr64 Firmware<=5.2.4.9

Digi TransPort DR64

Digi Transport Dr64 Firmware

Digi Transport Sr44

Digi Transport Vc74 Firmware<=5.2.4.9

Digi Transport Vc74

and 14 more

● CVE-2021-37189

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those...

Digi Transport Wr11 Firmware<6.0.0.0

Digi Transport Wr11

Digi Transport Wr11 Xt Firmware<6.0.0.0

Digi Transport Wr11 Xt

Digi Transport Wr21 Firmware<6.0.0.0

Digi TransPort WR21

and 6 more

● CVE-2021-37188

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is authentic), changing the...

Digi Transport Dr64 Firmware<=5.2.4.9

Digi TransPort DR64

Digi Transport Dr64 Firmware

Digi Transport Sr44

Digi Transport Vc74 Firmware<=5.2.4.9

Digi Transport Vc74

and 14 more

● CVE-2021-35978

An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges. This allows an attacker (with knowledge of the pro...

Digi Transport Dr64 Firmware<=5.2.4.9

Digi TransPort DR64

Digi Transport Sr44 Firmware

Digi Transport Sr44

Digi Transport Vc74 Firmware<=5.2.4.9

Digi Transport Vc74

and 14 more

● CVE-2020-8822

Digi TransPort WR21 5.2.2.3, WR44 5.1.6.4, and WR44v2 5.1.6.9 devices allow stored XSS in the web application.

Digi Transport Wr21 Firmware=5.2.2.3

Digi TransPort WR21

Digi Transport Wr44 Firmware=5.1.6.4

Digi Transport Wr44

Digi Transport Wr44 Firmware=5.1.6.9

Digi Transport Wr44=2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.