medium6.5
CVE-2021-37187
An issue was discovered on Digi TransPort devices through 2021-07-21.
Impact
An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) from the device, which allows decoding of other users' passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digi | Transport Dr64 Firmware | through 5.2.4.9 All versions |
| Digi | Transport Vc74 Firmware | through 5.2.4.9 |
| Digi | Transport Wr11 Firmware | through 8.2.1.3 |
| Digi | Transport Wr11 Xt Firmware | through 8.2.1.3 |
| Digi | Transport Wr21 Firmware | through 8.2.1.3 |
| Digi | Transport Wr31 Firmware | through 8.2.1.3 |
| Digi | Transport Wr41 Firmware | from 5.0.0.0 through 5.2.4.6 from 6.0.0.0 through 6.1.3.5 from 8.0.0.0 through 8.3.1.2 |
| Digi | Transport Wr44 Firmware | through 8.3.1.2 |