Vulnerabilities

TI-2025-33660 CVE-2025-53758 · GHSA-vj9q-gw7f-j56j

Default Credential Vulnerability in Digisol DG-GR6821AC Router

LOW 22

This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface.

CVSS 4.0MEDIUM 5.1 Physical No auth No interaction EPSS 0.00148 Published 2025-07-16 No fix listed CWE-312

TI-2025-33659 CVE-2025-53757 · GHSA-f3mc-75q8-f845

Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router

MEDIUM 44

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0032 Published 2025-07-16 No fix listed CWE-1004

TI-2025-33658 CVE-2025-53756 · GHSA-4cmm-32xh-qc83

Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router

MEDIUM 43

This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0031 Published 2025-07-16 No fix listed CWE-319

TI-2025-33657 CVE-2025-53755 · GHSA-7gm3-hgj4-pgxq

Cleartext Storage Vulnerability in Digisol DG-GR6821AC Router

LOW 22

This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware.

CVSS 4.0MEDIUM 5.1 Physical No auth No interaction EPSS 0.00107 Published 2025-07-16 No fix listed CWE-312

TI-2025-33656 CVE-2025-53754 · GHSA-85v4-g9qp-63hc

Hard-coded Credentials Vulnerability in Digisol DG-GR6821AC Router

LOW 23

This vulnerability exists in Digisol DG-GR6821AC Router due to hard-coded Root Access Credentials in system configuration of the device firmware.

CVSS 4.0MEDIUM 5.1 Physical No auth No interaction EPSS 0.00204 Published 2025-07-16 No fix listed CWE-798

TI-2024-03937 CVE-2024-4232 · GHSA-p55r-fqh8-ccwq

Password Storage in Plaintext Vulnerability in Digisol Router

LOW 26

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to lack of encryption or hashing in storing of passwords within the router's firmware/ database.

CVSS 4.0MEDIUM 5.4 Physical No auth No interaction EPSS 0.0034 Published 2024-05-10 No fix listed CWE-256

TI-2024-03936 CVE-2024-4231 · GHSA-7c88-698j-qxf8

Incorrect Access Control Vulnerability in Digisol Router

LOW 33

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial interface without proper access control.

CVSS 4.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00563 Published 2024-05-10 No fix listed CWE-1191

TI-2024-02094 CVE-2024-2257 · GHSA-56hg-r682-945v

Password Policy Bypass Vulnerability in Digisol Router

MEDIUM 49

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to improper implementation of password policies.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01026 Published 2024-05-10 No fix listed CWE-20

TI-2020-17923 CVE-2020-35262 · GHSA-3228-63jx-j274

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the…

LOW 29

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00873 Published 2021-01-06 No fix listed CWE-79

TI-2018-10136 CVE-2018-14027 · GHSA-4qpf-4jj7-qpr4

Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page.

LOW 29

Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00833 Published 2019-07-05 No fix listed CWE-79

TI-2018-09125 CVE-2018-12715 · GHSA-2rc2-hm22-xr6p

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged.

LOW 29

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00856 Published 2019-07-03 No fix listed CWE-79

TI-2018-09119 CVE-2018-12706 · GHSA-hx92-457p-hr65

DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.

MEDIUM 54

DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.09566 Published 2018-06-24 No fix listed CWE-119

TI-2018-09118 CVE-2018-12705 · GHSA-pvv2-53ff-xmpp

DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).

LOW 32

DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02211 Published 2018-06-24 No fix listed CWE-79

TI-2017-04627 CVE-2017-6896 · GHSA-5qxh-r3cq-86g7

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router…

MEDIUM 44

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03703 Published 2017-03-14 No fix listed CWE-565

TI-2017-04002 CVE-2017-6127 · GHSA-w65j-545f-v72r

Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the…

LOW 39

Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for req…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00799 Published 2017-02-21 No fix listed CWE-352

Vulnerabilities

Filters