Digi Transport Wr44
5 CVEs affecting Digi Transport Wr44. Latest disclosed: 2021-12-10. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-35978 | Critical | 9.8 | 2021-12-10 | An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges. This allo… |
CVE-2021-37188 | High | 8.8 | 2021-12-10 | An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not v… |
CVE-2021-37189 | High | 7.5 | 2021-12-10 | An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which… |
CVE-2021-37187 | Medium | 6.5 | 2021-12-10 | An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) from the d… |
CVE-2020-8822 | Medium | 4.8 | 2020-02-10 | Digi TransPort WR21 5.2.2.3, WR44 5.1.6.4, and WR44v2 5.1.6.9 devices allow stored XSS in the web application. |