by Kastro
Paper/Archive/CVE-2021-38478

CVE-2021-38478

InHand Networks IR615 Router — InHand Networks IR615 Router

EPSS 1%CVSS 9.1
critical.is priorityof 100
41
CVSS 9.1 (CNA, NVD agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 67.2.672 × 2013.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device.

Affected

ProductAffectedFixed inSource
IR615 Router2.3.0.r4724 and 2.3.0.r4870–CNA

Scores by source

icscert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsa-21-280-05