CVE-2024-2257CWE-20

Password Policy Bypass Vulnerability in Digisol Router

Critical · published May 10, 2024

CVSS v3.1
9.1
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

🚨 A crafty loophole in password policy is leaving Digisol routers wide open! 🔥 Think of it like a hotel that lets guests set their own room keys without checking the standards — anyone could end up with a key that opens all the doors! If an attacker gains physical access, they can create weak passwords that bypass the security measures altogether. This could expose the router to malicious intrusions, leading to unauthorized access and potentially devastating security breaches for the network!

Put simply

Think of it like a hotel that lets guests set their own room keys without checking the standards — anyone could end up with a key that opens all the doors! The vulnerability in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version: v3.2.02) arises from improper implementation of password policies, allowing an attacker to set passwords that don't meet security standards.

What to do

If an attacker gains physical access, they can create weak passwords that bypass the security measures altogether. This could expose the router to malicious intrusions, leading to unauthorized access and potentially devastating security breaches for the network! To protect your network, immediately patch to the latest firmware version that addresses this vulnerability. Ensure robust password policies are enforced and monitor physical access to your devices closely! You've got this! By taking these steps, you can secure your network and keep the bad guys out! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01026 · 63.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-05-10T13:26Z
EPSS history
Timeline
  • 10 MAY 13:26Z
    Password Policy Bypass Vulnerability in Digisol Router
    cvelistv5