CVE-2024-2257— Password Policy Bypass Vulnerability in Digisol Router
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-2257
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Password Policy Bypass Vulnerability in Digisol Router
Source: NVD (National Vulnerability Database)
Vulnerability Description
This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to improper implementation of password policies. An attacker with physical access could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Digisol Router 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Digisol Router是Digisol公司的一系列路由器。 Digisol Router存在安全漏洞，该漏洞源于密码策略实施不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Digisol | Digisol Router DG-GR1321 | v3.2.02 | - |
II. Public POCs for CVE-2024-2257
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/Redfox-Secuirty/Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257 | POC Details |
| 2 | None | https://github.com/Redfox-Security/Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-2257
请登录查看更多情报信息。
Same Patch Batch · Digisol · 2024-05-10 · 3 CVEs total
| CVE-2024-4231 | Incorrect Access Control Vulnerability in Digisol Router | |
| CVE-2024-4232 | Password Storage in Plaintext Vulnerability in Digisol Router |
IV. Related Vulnerabilities
Same vendor: Digisol
- CVE-2025-53758
Default Credential Vulnerability in Digisol DG-GR6821AC Rout - CVE-2025-53757
Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC R - CVE-2025-53756
Cleartext Transmission Vulnerability in Digisol DG-GR6821AC - CVE-2025-53755
Cleartext Storage Vulnerability in Digisol DG-GR6821AC Route - CVE-2025-53754
Hard-coded Credentials Vulnerability in Digisol DG-GR6821AC
Same weakness: CWE-20
V. Comments for CVE-2024-2257
No comments yet