CVE-2024-4232

Medium

Description

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to lack of encryption or hashing in storing of passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext passwords on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system.

SeverityMedium
CVSS4.1
Exploit probability—
ProductDigisol Router DG-GR1321
PublishedMay 14, 2024
First seenMay 14, 2024
Weakness typeCWE-256CWE-256

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
Digisol Digisol Router DG-GR1321v3.2.02—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2024-4232 · Digisol Router DG-GR1321 · Dark Radar