high8.8
CVE-2021-37188
An issue was discovered on Digi TransPort devices through 2021-07-21.
Impact
An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is authentic), changing the behavior of the gateway.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digi | Transport Dr64 Firmware | through 5.2.4.9 All versions |
| Digi | Transport Vc74 Firmware | through 5.2.4.9 |
| Digi | Transport Wr11 Firmware | through 8.2.1.3 |
| Digi | Transport Wr11 Xt Firmware | through 8.2.1.3 |
| Digi | Transport Wr21 Firmware | through 8.2.1.3 |
| Digi | Transport Wr31 Firmware | through 8.2.1.3 |
| Digi | Transport Wr41 Firmware | from 5.0.0.0 through 5.2.4.6 from 6.0.0.0 through 6.1.3.5 from 8.0.0.0 through 8.3.1.2 |
| Digi | Transport Wr44 Firmware | through 8.3.1.2 |