CVE:CVE-2021-37189
CNNVD:CNNVD-202112-811
Digi International Digi TransPort是美国Digi International公司的一款功能齐全的蜂窝路由器。
Digi TransPort Gateway存在安全漏洞，该漏洞源于它们没有为HTTPS会话中的敏感cookie设置Secure属性，这可能会导致用户代理通过HTTP会话以明文形式发送这些cookie。
solution:Upgrade digi transport_wr11_firmware to a higher version than 6.0.0.0,and avoid the version (,6.0.0.0); Upgrade digi transport_wr11_xt_firmware to a higher version than 6.0.0.0,and avoid the version (,6.0.0.0); Upgrade digi transport_wr21_firmware to a higher version than 6.0.0.0,and avoid the version (,6.0.0.0); Upgrade digi transport_wr31_firmware to a higher version than 6.0.0.0,and avoid the version (,6.0.0.0); Upgrade digi transport_wr41_firmware to a higher version than 6.0.0.0,and avoid the version (,6.0.0.0); Upgrade digi transport_wr44_firmware to a higher version than 6.0.0.0,and avoid the version (,6.0.0.0)