Vulnerability Description
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an attacker to have full control over the product and execute code within the internal network to which the product is connected.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Inhandnetworks | Ir615 Firmware | 2.3.0.r4724 |
| Inhandnetworks | Ir615 | - |
Related Weaknesses (CWE)
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05Third Party AdvisoryUS Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2021-38486?
CVE-2021-38486 is a vulnerability with a CVSS score of 8.0 (HIGH). InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an ...
How severe is CVE-2021-38486?
CVE-2021-38486 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-38486?
Check the references section above for vendor advisories and patch information. Affected products include: Inhandnetworks Ir615 Firmware, Inhandnetworks Ir615.