Ganesh Bakare

**Name of the Vulnerable Software and Affected Versions** Digisol Router (DG-GR1321) version v3.2.02 **Description** This issue is caused by the improper implementation of password policies. An attacker with physical access could exploit this by creating passwords that do not adhere to the defined security standards or policy on the vulnerable system. Successful exploitation could allow the attacker to expose the router to potential security threats. **Recommendations** For Digisol Router (DG-GR1321) version v3.2.02, consider changing the password policy to enforce stronger passwords and adhere to defined security standards to minimize the risk of exploitation. As a temporary workaround, restrict physical access to the router until a patch or fix is available.

**Name of the Vulnerable Software and Affected Versions** Digisol Router (DG-GR1321) version v3.2.02 **Description** This issue exists due to the presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by identifying UART pins and accessing the root shell on the vulnerable system. Successful exploitation could allow the attacker to access sensitive information on the targeted system. **Recommendations** For Digisol Router (DG-GR1321) version v3.2.02, consider restricting physical access to the device to minimize the risk of exploitation. As a temporary workaround, limiting access to the serial interface could help mitigate the issue until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Digisol Router (DG-GR1321) version v3.2.02 **Description** This issue is caused by the lack of encryption or hashing in storing passwords within the router's firmware/database. An attacker with physical access could exploit this by extracting the firmware and reverse-engineering the binary data to access plaintext passwords. Successful exploitation could allow the attacker to gain unauthorized access to the targeted system. **Recommendations** For Digisol Router (DG-GR1321) version v3.2.02, consider changing passwords and restricting physical access to the device until a patch is available. As a temporary workaround, restrict access to the router's firmware and database to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.