CVE-2021-35978

🗓️ 10 Dec 2021 12:18:39Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 41 Views

An issue in Digi TransPort devices allows arbitrary remote command execution with SUPER privileges

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2021-35978	10 Dec 202116:25	–	circl
CNNVD	Digi TransPort DR64 命令注入漏洞	10 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-35978	10 Dec 202112:18	–	cvelist
EUVD	EUVD-2021-22611	7 Oct 202500:30	–	euvd
NVD	CVE-2021-35978	10 Dec 202113:15	–	nvd
Prion	Command injection	10 Dec 202113:15	–	prion
RedhatCVE	CVE-2021-35978	22 May 202520:37	–	redhatcve

NVD

Node

digi transport_dr64_firmwareRange≤5.2.4.9

AND

digi transport_dr64Match-

Node

digi transport_sr44_firmware

AND

digi transport_sr44Match-

Node

digi transport_vc74_firmwareRange≤5.2.4.9

AND

digi transport_vc74Match-

Node

digi transport_wr11_firmwareRange≤8.2.1.3

AND

digi transport_wr11Match-

Node

digi transport_wr11_xt_firmwareRange≤8.2.1.3

AND

digi transport_wr11_xtMatch-

Node

digi transport_wr21_firmwareRange≤8.2.1.3

AND

digi transport_wr21Match-

Node

digi transport_wr31_firmwareRange≤8.2.1.3

AND

digi transport_wr31Match-

Node

digi transport_wr41_firmwareRange5.0.0.0–5.2.4.6

OR

digi transport_wr41_firmwareRange6.0.0.0–6.1.3.5

OR

digi transport_wr41_firmwareRange8.0.0.0–8.3.1.2

AND

digi transport_wr41Match-

Node

digi transport_wr44_firmwareRange≤8.3.1.2

AND

digi transport_wr44Matchv2

Source	Link
digi	www.digi.com/
raw	www.raw.githubusercontent.com/reidmefirst/vuln-disclosure/main/2021-04.txt

21 Nov 2024 06:12Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

CVSS 210

EPSS0.08068

cve-2021-35978 digi transport zing protocol arbitrary code execution remote command execution firmware vulnerability nvd