CVE-2021-38486CWE-285

InHand Networks IR615 Router

High · published October 19, 2021

CVSS v3.1
8.0
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an attacker to have full control over the product and execute code within the internal network to which the product is connected.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00799 · 56.1th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-10-19T12:11Z
EPSS history
Timeline
  • 19 OCT 12:11Z
    InHand Networks IR615 Router
    cvelistv5