Fiche vulnérabilité
CVE-2021-38486 : faille élevée InHand Networks IR615 Router (CVSS 8.0)
Description
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an attacker to have full control over the product and execute code within the internal network to which the product is connected.
En bref
- Sévérité
- Élevée (CVSS 8.0)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 19 oct. 2021
- Dernière mise à jour
- 16 sept. 2024
Produits concernés
- InHand Networks IR615 Router
Correctif et mesures
InHand Networks has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of this affected product are invited to contact InHand Networks customer support.