CVE-2024-2257 - CVE House
Back to Database
Status published Unknown CVE-2024-2257

Password Policy Bypass Vulnerability in Digisol Router

Vulnerability Description

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to improper implementation of password policies. An attacker with physical access could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2257

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • This vulnerability is discovered by Shravan Singh, Ganesh Bakare and Karan Patel from Redfox Cyber Security Inc, Toronto, Canada.

References

More from Digisol

View All →
CVE-2025-53758
Default Credential Vulnerability in Digisol DG-GR6821AC Router
Medium 5.1
CVE-2025-53757
Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router
High 8.7
CVE-2025-53756
Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router
High 8.7
CVE-2025-53755
Cleartext Storage Vulnerability in Digisol DG-GR6821AC Router
Medium 5.1
CVE-2025-53754
Hard-coded Credentials Vulnerability in Digisol DG-GR6821AC Router
Medium 5.1

Affected Vendor

Affected Software

Digisol Router DG-GR1321
Vulnerable Versions:
v3.2.02

Timeline

Official Publish: May 10th, 2024
Last Modified: August 1st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-20

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1213 Data from Information Repositories
Collection
T1565.002 Stored Data Manipulation
Impact