PT-2024-29859 · Digisol · Digisol Router

Ganesh Bakare + 2 · Published 2024-05-10 · Updated 2025-09-12 · CVE-2024-4231

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Digisol Router (DG-GR1321) version v3.2.02

Description This issue exists due to the presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by identifying UART pins and accessing the root shell on the vulnerable system. Successful exploitation could allow the attacker to access sensitive information on the targeted system.

Recommendations For Digisol Router (DG-GR1321) version v3.2.02, consider restricting physical access to the device to minimize the risk of exploitation. As a temporary workaround, limiting access to the serial interface could help mitigate the issue until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1191

Related Identifiers

CVE-2024-4231

Affected Products

Digisol Router

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-4231 · Security Note
• https://t.me/cvenotify/82076 · Telegram Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0158 · Note
• https://twitter.com/redfoxsec/status/1966429682607513923 · Twitter Post