ZeroHour

CVE-2021-37187

CVSS 3.1
6.5 medium
EPSS
<1%p50
Published
()
Modified
Description

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) from the device, which allows decoding of other users' passwords.

Vendors
digi
Products
transport dr64 firmware, transport vc74 firmware, transport wr11 firmware, transport wr11 xt firmware, transport wr21 firmware, transport wr31 firmware, transport wr41 firmware, transport wr44 firmware
Weakness
CWE-522
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.