ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-37188

—
CVSS 3.1
8.8 high
EPSS
<1%p39
Published
()
Modified
Description

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is authentic), changing the behavior of the gateway.

Vendors
digi
Products
transport dr64 firmware, transport vc74 firmware, transport wr11 firmware, transport wr11 xt firmware, transport wr21 firmware, transport wr31 firmware, transport wr41 firmware, transport wr44 firmware
Weakness
CWE-345
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

No ingested article mentions this CVE yet.