CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-35978

An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges. This allows an attacker (with knowledge of the protocol) to execute arbitrary code on the controller including overwriting firmware, adding/removing users, disabling the internal firewall, etc.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.081

EPSS Ranking 91.6%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2021-35978

Digi » Transport Dr64 » Version: N/A

cpe:2.3:h:digi:transport_dr64:-
Digi » Transport Sr44 » Version: N/A

cpe:2.3:h:digi:transport_sr44:-
Digi » Transport Vc74 » Version: N/A

cpe:2.3:h:digi:transport_vc74:-
Digi » Transport Wr11 » Version: N/A

cpe:2.3:h:digi:transport_wr11:-
Digi » Transport Wr11 Xt » Version: N/A

cpe:2.3:h:digi:transport_wr11_xt:-
Digi » Transport Wr21 » Version: N/A

cpe:2.3:h:digi:transport_wr21:-
Digi » Transport Wr31 » Version: N/A

cpe:2.3:h:digi:transport_wr31:-
Digi » Transport Wr41 » Version: N/A

cpe:2.3:h:digi:transport_wr41:-
Digi » Transport Wr44 » Version: v2

cpe:2.3:h:digi:transport_wr44:v2
Digi » Transport Dr64 Firmware » Version: N/A

cpe:2.3:o:digi:transport_dr64_firmware:-
Digi » Transport Dr64 Firmware » Version: 5.2.4.9

cpe:2.3:o:digi:transport_dr64_firmware:5.2.4.9
Digi » Transport Sr44 Firmware » Version: Any

cpe:2.3:o:digi:transport_sr44_firmware:*
Digi » Transport Vc74 Firmware » Version: N/A

cpe:2.3:o:digi:transport_vc74_firmware:-
Digi » Transport Vc74 Firmware » Version: 5.2.4.9

cpe:2.3:o:digi:transport_vc74_firmware:5.2.4.9
Digi » Transport Wr11 Firmware » Version: N/A

cpe:2.3:o:digi:transport_wr11_firmware:-
Digi » Transport Wr11 Firmware » Version: 6.0.0.0

cpe:2.3:o:digi:transport_wr11_firmware:6.0.0.0
Digi » Transport Wr11 Firmware » Version: 8.2.1.3

cpe:2.3:o:digi:transport_wr11_firmware:8.2.1.3
Digi » Transport Wr11 Xt Firmware » Version: N/A

cpe:2.3:o:digi:transport_wr11_xt_firmware:-
Digi » Transport Wr11 Xt Firmware » Version: 6.0.0.0

cpe:2.3:o:digi:transport_wr11_xt_firmware:6.0.0.0
Digi » Transport Wr11 Xt Firmware » Version: 8.2.1.3

cpe:2.3:o:digi:transport_wr11_xt_firmware:8.2.1.3
Digi » Transport Wr21 Firmware » Version: N/A

cpe:2.3:o:digi:transport_wr21_firmware:-
Digi » Transport Wr21 Firmware » Version: 5.2.2.3

cpe:2.3:o:digi:transport_wr21_firmware:5.2.2.3
Digi » Transport Wr21 Firmware » Version: 6.0.0.0

cpe:2.3:o:digi:transport_wr21_firmware:6.0.0.0
Digi » Transport Wr21 Firmware » Version: 8.2.1.3

cpe:2.3:o:digi:transport_wr21_firmware:8.2.1.3
Digi » Transport Wr31 Firmware » Version: Any

cpe:2.3:o:digi:transport_wr31_firmware:*
Digi » Transport Wr41 Firmware » Version: 5.0.0.0

cpe:2.3:o:digi:transport_wr41_firmware:5.0.0.0
Digi » Transport Wr41 Firmware » Version: 5.2.4.6

cpe:2.3:o:digi:transport_wr41_firmware:5.2.4.6
Digi » Transport Wr41 Firmware » Version: 6.0.0.0

cpe:2.3:o:digi:transport_wr41_firmware:6.0.0.0
Digi » Transport Wr41 Firmware » Version: 6.1.3.5

cpe:2.3:o:digi:transport_wr41_firmware:6.1.3.5
Digi » Transport Wr41 Firmware » Version: 8.0.0.0

cpe:2.3:o:digi:transport_wr41_firmware:8.0.0.0
Digi » Transport Wr41 Firmware » Version: 8.0.0.3

cpe:2.3:o:digi:transport_wr41_firmware:8.0.0.3
Digi » Transport Wr41 Firmware » Version: 8.1.0.1

cpe:2.3:o:digi:transport_wr41_firmware:8.1.0.1
Digi » Transport Wr41 Firmware » Version: 8.2.0.2

cpe:2.3:o:digi:transport_wr41_firmware:8.2.0.2
Digi » Transport Wr41 Firmware » Version: 8.3.0.1

cpe:2.3:o:digi:transport_wr41_firmware:8.3.0.1
Digi » Transport Wr41 Firmware » Version: 8.3.1.2

cpe:2.3:o:digi:transport_wr41_firmware:8.3.1.2
Digi » Transport Wr44 Firmware » Version: N/A

cpe:2.3:o:digi:transport_wr44_firmware:-
Digi » Transport Wr44 Firmware » Version: 5.1.6.4

cpe:2.3:o:digi:transport_wr44_firmware:5.1.6.4
Digi » Transport Wr44 Firmware » Version: 5.1.6.9

cpe:2.3:o:digi:transport_wr44_firmware:5.1.6.9
Digi » Transport Wr44 Firmware » Version: 6.0.0.0

cpe:2.3:o:digi:transport_wr44_firmware:6.0.0.0
Digi » Transport Wr44 Firmware » Version: 8.3.1.2

cpe:2.3:o:digi:transport_wr44_firmware:8.3.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-35978

Products

Pricing

Contact Us