CVE-2024-4232— Password Storage in Plaintext Vulnerability in Digisol Router
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-4232
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Password Storage in Plaintext Vulnerability in Digisol Router
Source: NVD (National Vulnerability Database)
Vulnerability Description
This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to lack of encryption or hashing in storing of passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext passwords on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
明文存储口令
Source: NVD (National Vulnerability Database)
Vulnerability Title
Digisol Router 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Digisol Router是Digisol公司的一系列路由器。 Digisol Router存在安全漏洞，该漏洞源于在没有适当访问控制的情况下在串行接口上存在根终端访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Digisol | Digisol Router DG-GR1321 | v3.2.02 | - |
II. Public POCs for CVE-2024-4232
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/Redfox-Secuirty/Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232 | POC Details |
| 2 | None | https://github.com/Redfox-Secuirty/Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232 | POC Details |
| 3 | None | https://github.com/Redfox-Security/Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232 | POC Details |
| 4 | None | https://github.com/Redfox-Security/Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-4232
请登录查看更多情报信息。
Same Patch Batch · Digisol · 2024-05-10 · 3 CVEs total
| CVE-2024-2257 | Password Policy Bypass Vulnerability in Digisol Router | |
| CVE-2024-4231 | Incorrect Access Control Vulnerability in Digisol Router |
IV. Related Vulnerabilities
Same vendor: Digisol
- CVE-2025-53758
Default Credential Vulnerability in Digisol DG-GR6821AC Rout - CVE-2025-53757
Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC R - CVE-2025-53756
Cleartext Transmission Vulnerability in Digisol DG-GR6821AC - CVE-2025-53755
Cleartext Storage Vulnerability in Digisol DG-GR6821AC Route - CVE-2025-53754
Hard-coded Credentials Vulnerability in Digisol DG-GR6821AC
V. Comments for CVE-2024-4232
No comments yet