CVE-2021-38464 MEDIUM

CVE-2021-38464: InHand Networks IR615 Router

Vendor Inhand Networks
Product IR615 Router
Weakness CWE-326 · Weak encryption
Published October 19, 2021
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

6.4/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.

Key dates

02Disclosure timeline

October 19, 2021 CVE published
September 17, 2024 Record updated