What is CVE-2024-2257?

CVE-2024-2257 is a vulnerability in Digisol Router Dg-gr1321, classified under Improper Input Validation. Published 2024-05-10.

Is CVE-2024-2257 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Digisol Router Dg-gr1321

CVE-2024-2257

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to improper implementation of password policies. An attacker with physical access could exploit this by creating password that…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.036 (88.0th percentile) — read the EPSS interpretation.

Affected products

Digisol Router Dg-gr1321 — versions v3.2.02

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

Redfox-Security/Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257
ARPSyndicate/cve-scores
Redfox-Secuirty/Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257
nomi-sec/PoC-in-GitHub

References

www.cert-in.org.in/s2cMainServlet (third-party-advisory)

Frequently asked questions

What is CVE-2024-2257?: CVE-2024-2257 is a vulnerability in Digisol Router Dg-gr1321, classified under Improper Input Validation. Published 2024-05-10.
Is CVE-2024-2257 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.