Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
inhandnetworks ir615 firmware 2.3.0.r4870 vulnerabilities and exploits
(subscribe to this query)
9.3
CVSSv2
CVE-2021-38480
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web application trusts. This may allow an malicious user to remotely perform actions on the router’...
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
9
CVSSv2
CVE-2021-38484
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which may allow an attacker, acting as an administrator, to upload malicious files. This could result ...
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
7.5
CVSSv2
CVE-2021-38462
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform operations on their behalf.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
6.5
CVSSv2
CVE-2021-38478
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device. This may allow the malicious user to remotely run commands on behalf of the device.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
6.5
CVSSv2
CVE-2021-38470
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device. This may allow the malicious user to remotely run commands on behalf of the device.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
6
CVSSv2
CVE-2021-38486
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an malicious user to have full control over the product and execute code withi...
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
5.8
CVSSv2
CVE-2021-38464
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an malicious user to intercept the communication and steal sensitive information or hijack the session.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
5
CVSSv2
CVE-2021-38474
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. This may allow an malicious user to execute a brute-force password attack with no time limitation and without harming the norm...
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
5
CVSSv2
CVE-2021-38476
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an malicious user to enumerate different user accounts.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
4.3
CVSSv2
CVE-2021-38466
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an malicious user to perform a reflected cross-site scripting attack, which could allow an malicious user to r...
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27802
template injection
CVE-2024-0044
code injection
CVE-2024-35474
CVE-2024-27857
CVE-2024-23251
CVE-2024-23692
physical
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »