What’s Vulnerable › Vulnerabilities

CVE-2021-37188

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-10 · updated 2026-06-17
• Weakness: CWE-345

Description

An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware (because the bootloader does not verify that it is authentic), changing the behavior of the gateway.

Affected products

• Digi Transport Dr64 Firmware: through 5.2.4.9
• Digi Transport Vc74 Firmware: through 5.2.4.9
• Digi Transport Wr11 Firmware: through 8.2.1.3
• Digi Transport Wr11 Xt Firmware: through 8.2.1.3
• Digi Transport Wr21 Firmware: through 8.2.1.3
• Digi Transport Wr31 Firmware: through 8.2.1.3
• Digi Transport Wr41 Firmware: from 5.0.0.0 through 5.2.4.6; from 6.0.0.0 through 6.1.3.5; from 8.0.0.0 through 8.3.1.2
• Digi Transport Wr44 Firmware: through 8.3.1.2

References

• https://raw.githubusercontent.com/reidmefirst/vuln-disclosure/main/2021-04.txt
• https://www.digi.com/search/results?q=transport
• https://raw.githubusercontent.com/reidmefirst/vuln-disclosure/main/2021-04.txt
• https://www.digi.com/search/results?q=transport

Get alerted when CVE-2021-37188 or the next vulnerability affects your stack