Lucene search

IcscertCVELIST:CVE-2021-38486

HistoryOct 07, 2021 - 12:00 a.m.

CVE-2021-38486 InHand Networks IR615 Router

2021-10-0700:00:00

CWE-285

icscert

www.cve.org

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.2%

JSON

InHand Networks IR615 Router’s Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an attacker to have full control over the product and execute code within the internal network to which the product is connected.

CNA Affected

[
  {
    "product": "IR615 Router",
    "vendor": "InHand Networks ",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.0.r4724 and 2.3.0.r4870"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-280-05

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.2%

JSON

Related for CVELIST:CVE-2021-38486