Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
inhandnetworks ir615 firmware 2.3.0.r4724 vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2021-38462
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform operations on their behalf.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
516
VMScore
CVE-2021-38464
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an malicious user to intercept the communication and steal sensitive information or hijack the session.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
383
VMScore
CVE-2021-38466
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an malicious user to perform a reflected cross-site scripting attack, which could allow an malicious user to r...
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
828
VMScore
CVE-2021-38480
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web application trusts. This may allow an malicious user to remotely perform actions on the router’...
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
801
VMScore
CVE-2021-38484
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which may allow an attacker, acting as an administrator, to upload malicious files. This could result ...
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
578
VMScore
CVE-2021-38470
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device. This may allow the malicious user to remotely run commands on behalf of the device.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
445
VMScore
CVE-2021-38474
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. This may allow an malicious user to execute a brute-force password attack with no time limitation and without harming the norm...
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
445
VMScore
CVE-2021-38476
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an malicious user to enumerate different user accounts.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
578
VMScore
CVE-2021-38478
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device. This may allow the malicious user to remotely run commands on behalf of the device.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
312
VMScore
CVE-2021-38482
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scripting, which may allow an malicious user to hijack sessions of users connected to the system.
Inhandnetworks Ir615 Firmware 2.3.0.r4724
Inhandnetworks Ir615 Firmware 2.3.0.r4870
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »