An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may read a password file (with reversible passwords) from the device, which allows decoding of other users' passwords.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-37187
• https://raw.githubusercontent.com/reidmefirst/vuln-disclosure/main/2021-04.txt
• https://www.digi.com/search/results?q=transport