Design/Logic Flaw

2021-12-1013:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is authentic), changing the behavior of the gateway.

CPENameOperatorVersion
transport_dr64_firmwarele5.2.4.9
transport_vc74_firmwarele5.2.4.9
transport_wr11_firmwarele8.2.1.3
transport_wr11_xt_firmwarele8.2.1.3
transport_wr21_firmwarele8.2.1.3
transport_wr31_firmwarele8.2.1.3
transport_wr41_firmwarege5.0.0.0
transport_wr41_firmwarele5.2.4.6
transport_wr41_firmwarege6.0.0.0
transport_wr41_firmwarele6.1.3.5

Name	Operator	Version
transport_dr64_firmware	le	5.2.4.9
transport_vc74_firmware	le	5.2.4.9
transport_wr11_firmware	le	8.2.1.3
transport_wr11_xt_firmware	le	8.2.1.3
transport_wr21_firmware	le	8.2.1.3
transport_wr31_firmware	le	8.2.1.3
transport_wr41_firmware	ge	5.0.0.0
transport_wr41_firmware	le	5.2.4.6
transport_wr41_firmware	ge	6.0.0.0
transport_wr41_firmware	le	6.1.3.5