CVE:CVE-2021-37188
CNNVD:CNNVD-202112-809
Digi International Digi TransPort是美国Digi International公司的一款功能齐全的蜂窝路由器。
Digi TransPort存在数据伪造问题漏洞，该漏洞源于经过身份验证的攻击者可利用该漏洞可能加载定制的固件(因为引导加载程序不验证它是真实的)，从而改变网关的行为。
solution:Upgrade digi transport_dr64_firmware to a higher version than 5.2.4.9,-,and avoid the version (,5.2.4.9]; Upgrade digi transport_vc74_firmware to a higher version than 5.2.4.9,and avoid the version (,5.2.4.9]; Upgrade digi transport_wr11_firmware to a higher version than 8.2.1.3,and avoid the version (,8.2.1.3]; Upgrade digi transport_wr11_xt_firmware to a higher version than 8.2.1.3,and avoid the version (,8.2.1.3]; Upgrade digi transport_wr21_firmware to a higher version than 8.2.1.3,and avoid the version (,8.2.1.3]; Upgrade digi transport_wr31_firmware to a higher version than 8.2.1.3,and avoid the version (,8.2.1.3]; Upgrade digi transport_wr41_firmware to a higher version than 5.2.4.6,6.1.3.5,8.3.1.2,and avoid the version [5.0.0.0,5.2.4.6],[6.0.0.0,6.1.3.5],[8.0.0.0,8.3.1.2]; Upgrade digi transport_wr44_firmware to a higher version than 8.3.1.2,and avoid the version (,8.3.1.2]