CVE-2024-4232

MediumCVSS 4.1/10Last modified Jun 17, 2026

Description

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to lack of encryption or hashing in storing of passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext passwords on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system.

Metrics

CVSS 3.1 4.1/10CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-256

Affected software

No affected versions have been published.

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-423205.5In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error checks in dasd_copy_pair_store() dasd_add_busid()CVE-2024-423215.5In the Linux kernel, the following vulnerability has been resolved: net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE The following splat is CVE-2024-423225.5In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to CVE-2024-423238.8SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authori CVE-2024-423253.5Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as logi CVE-2024-423264.4There was discovered a use after free bug in browser.c in the es_browser_get_variant function CVE-2024-423279.9A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vu CVE-2024-423285.5When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_w CVE-2024-423293.3The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this fun CVE-2024-42334.3Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, T CVE-2024-423309.1The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned CVE-2024-423313.3In the src/libs/zbxembed/browser.c file, the es_browser_ctor method retrieves a heap pointer from the Duktape JavaScript engine. This heap p