CVE-2024-4231mediumCWE-1191

CVE-2024-4231: medium-severity vulnerability in Digisol Router DG-GR1321

Incorrect Access Control Vulnerability in Digisol Router

Published · Updated

Follow this CVE+ Monitor Digisol Router DG-GR1321

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.6%
This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by identifying UART pins and accessing the root shell on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to access the sensitive information on the targeted system.
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
Digisol · Digisol Router DG-GR1321
Related CVEs — Digisol Router DG-GR1321

In the same product, most dangerous first.

CVE-2024-2257CRITICALPassword Policy Bypass Vulnerability in Digisol RouterEPSS 1.0%CVE-2024-4232MEDIUMPassword Storage in Plaintext Vulnerability in Digisol RouterEPSS 0.3%