← Database

CVE-2021-37189

HIGH CVSS: 7.5 Published: 2021-12-10 Modified: 2026-06-17

Description

An issue was discovered on Digi TransPort Gateway devices through 5.2.13.4. They do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in cleartext over an HTTP session.

Affected Platforms

Digi Transport Wr11 FirmwareDigi Transport Wr21 FirmwareDigi Transport Wr41Digi Transport Wr21Digi Transport Wr11Digi Transport Wr31Digi Transport Wr41 FirmwareDigi Transport Wr44Digi Transport Wr11 XtDigi Transport Wr44 Firmware

Weakness Type

CWE-311

References