CVE:CVE-2021-37187
CNNVD:CNNVD-202112-808
Digi International Digi TransPort是美国Digi International公司的一款功能齐全的蜂窝路由器。
Digi International Digi TransPort 存在安全漏洞，该漏洞源于经过认证的攻击者可利用该漏洞可以从设备上读取密码文件(密码是可逆的)，这样就可以解码其他用户的密码。
solution:Upgrade digi transport_dr64_firmware to a higher version than 5.2.4.9,-,and avoid the version (,5.2.4.9]; Upgrade digi transport_vc74_firmware to a higher version than 5.2.4.9,and avoid the version (,5.2.4.9]; Upgrade digi transport_wr11_firmware to a higher version than 8.2.1.3,and avoid the version (,8.2.1.3]; Upgrade digi transport_wr11_xt_firmware to a higher version than 8.2.1.3,and avoid the version (,8.2.1.3]; Upgrade digi transport_wr21_firmware to a higher version than 8.2.1.3,and avoid the version (,8.2.1.3]; Upgrade digi transport_wr31_firmware to a higher version than 8.2.1.3,and avoid the version (,8.2.1.3]; Upgrade digi transport_wr41_firmware to a higher version than 5.2.4.6,6.1.3.5,8.3.1.2,and avoid the version [5.0.0.0,5.2.4.6],[6.0.0.0,6.1.3.5],[8.0.0.0,8.3.1.2]; Upgrade digi transport_wr44_firmware to a higher version than 8.3.1.2,and avoid the version (,8.3.1.2]