InHand Networks IR615 Router (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to have full control over the product, remotely perform actions on the product, intercept communication and steal sensitive information, session hijacking, and successful brute-force against user passwords. Additional successful exploitation may allow for the uploading of malicious files, deletion of system files, execution of remote code, and enumeration of user accounts and passwords.
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-38486US | high8.5OT elevated | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account,… | ||||
| CVE-2021-38484US | high7.2 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which m… | ||||
| CVE-2021-38482US | medium4.8 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scripting, which may allow an attacker to… | ||||
| CVE-2021-38480US | high8.8 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web applic… | ||||
| CVE-2021-38478US | critical9.1 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device. This may allow the att… | ||||
| CVE-2021-38476US | medium5.3 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an attacker… | ||||
| CVE-2021-38474US | critical9.8 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. This may allow an attacker to e… | ||||
| CVE-2021-38472US | medium4.7 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTIONS header, which an attacker may take advantage of by sending… | ||||
| CVE-2021-38470US | critical9.1 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device. This may allow the attacker… | ||||
| CVE-2021-38468US | medium4.8 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may allow an attacker to hijack sessions of users connected to t… | ||||
| CVE-2021-38466US | medium6.1 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to… | ||||
| CVE-2021-38464US | high7.4 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensit… | ||||
| CVE-2021-38462US | critical9.8 | — | ||
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enum… | ||||
references
External citations — patches, advisories, analysis.
remediations (13)
- MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html - MitigationIR615 Router
InHand Networks recommends users upgrade to version InRouter6XX-S-V2.3.0.r5484 or later.
https://inhandnetworks.com/product-security-advisories.html
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan