CVE-2021-38466 HIGH

CVE-2021-38466: InHand Networks IR615 Router

Vendor Inhand Networks

Product IR615 Router

Weakness CWE-79 · XSS

Published October 19, 2021

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L

What the vulnerability does

01Description

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an attacker to run code on behalf of the client browser.

Key dates

02Disclosure timeline

October 19, 2021 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-38466

Related vulnerabilities

04Related CVE

CVE-2020-1673 Junos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) services CVE-2024-12320 Team Rosters <= 4.7 - Reflected Cross-Site Scripting via 'tab' CVE-2026-5717 VI: Include Post By <= 0.4.200706 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_container' Shortcode Attribute CVE-2025-26564 WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-26103 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)