Lucene search

K
cvelistIcscertCVELIST:CVE-2021-38464
HistoryOct 07, 2021 - 12:00 a.m.

CVE-2021-38464 InHand Networks IR615 Router

2021-10-0700:00:00
CWE-326
icscert
www.cve.org

6.4 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.2%

InHand Networks IR615 Router’s Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.

CNA Affected

[
  {
    "product": "IR615 Router",
    "vendor": "InHand Networks ",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.0.r4724 and 2.3.0.r4870"
      }
    ]
  }
]

6.4 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.2%

Related for CVELIST:CVE-2021-38464