cve/2024/CVE-2024-4231.md
2024-06-22 09:37:59 +00:00

18 lines
1.0 KiB
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

### [CVE-2024-4231](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4231)
![](https://img.shields.io/static/v1?label=Product&message=Digisol%20Router%20DG-GR1321&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20v3.2.02%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-1191%3A%20On-Chip%20Debug%20and%20Test%20Interface%20With%20Improper%20Access%20Control&color=brighgreen)
### Description
This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by identifying UART pins and accessing the root shell on the vulnerable system.Successful exploitation of this vulnerability could allow the attacker to access the sensitive information on the targeted system.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/nomi-sec/PoC-in-GitHub