CVE-2021-38486

HIGH

InHand Networks IR615 Router's Versions 2.3.0.r4724-2.3.0.r4870 - RCE

Title source: llm
STIX 2.1

Description

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an attacker to have full control over the product and execute code within the internal network to which the product is connected.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05

Scores

CVSS v3 8.0
EPSS 0.0075
EPSS Percentile 50.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Details

CWE
CWE-285 CWE-862
Status published
Products (2)
inhandnetworks/ir615_firmware 2.3.0.r4724
inhandnetworks/ir615_firmware 2.3.0.r4870
Published Oct 19, 2021
Tracked Since Feb 18, 2026