CVE-2024-2257

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-2257
This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to improper implementation of password policies. An attacker with physical access could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0158
Configurations

No configuration.

History

03 Jul 2024, 01:53

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1

05 Jun 2024, 13:15

Type Values Removed Values Added
Summary
  • (es) Esta vulnerabilidad existe en Digisol Router (DG-GR1321: versión de hardware 3.7L; versión de firmware: v3.2.02) debido a una implementación incorrecta de las políticas de contraseña. Un atacante con acceso físico podría aprovechar esto creando una contraseña que no cumpla con los estándares/políticas de seguridad definidos en el sistema vulnerable. La explotación exitosa de esta vulnerabilidad podría permitir al atacante exponer el enrutador a posibles amenazas a la seguridad.
CWE CWE-20

14 May 2024, 15:18

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 15:18

Updated : 2024-07-03 01:53

NVD link : CVE-2024-2257

Mitre link : CVE-2024-2257

CVE.ORG link : CVE-2024-2257

JSON object : View

Products Affected

No product.

CWE
CWE-20

Improper Input Validation