CVE-2021-37188
published 2021-12-10CVE-2021-37188: An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not…
PriorityP344high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.46%
36.9th percentile
An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is authentic), changing the behavior of the gateway.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| digi | transport_dr64_firmware | <= 5.2.4.9 | — |
| digi | transport_vc74_firmware | <= 5.2.4.9 | — |
| digi | transport_wr11_firmware | <= 8.2.1.3 | — |
| digi | transport_wr11_xt_firmware | <= 8.2.1.3 | — |
| digi | transport_wr21_firmware | <= 8.2.1.3 | — |
| digi | transport_wr31_firmware | <= 8.2.1.3 | — |
| digi | transport_wr41_firmware | 5.0.0.0 – 5.2.4.6 | — |
| digi | transport_wr41_firmware | 6.0.0.0 – 6.1.3.5 | — |
| digi | transport_wr41_firmware | 8.0.0.0 – 8.3.1.2 | — |
| digi | transport_wr44_firmware | <= 8.3.1.2 | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-12-10
Published