Medium severity4.8NVD Advisory· Published Feb 10, 2020· Updated Jun 17, 2026
CVE-2020-8822
CVE-2020-8822
Description
Digi TransPort WR21 5.2.2.3, WR44 5.1.6.4, and WR44v2 5.1.6.9 devices allow stored XSS in the web application.
Affected products
7- cpe:2.3:o:digi:transport_wr21_firmware:5.2.2.3:*:*:*:*:*:*:*
cpe:2.3:o:digi:transport_wr44_firmware:5.1.6.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:digi:transport_wr44_firmware:5.1.6.4:*:*:*:*:*:*:*
- cpe:2.3:o:digi:transport_wr44_firmware:5.1.6.9:*:*:*:*:*:*:*
- Digi/TransPort WR21description
- Range: 5.2.2.3
- Range: 5.1.6.4
- Range: 5.1.6.9
Patches
Vulnerability mechanics
References
1- sku11army.blogspot.com/2020/02/digi-transport-stored-xss-on-wr-family.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.