CVE Feed

    Dashboard / CVE / CVE-2021-38464

    CVE-2021-38464

    InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.

    Published:Oct 19, 2021
    Last Modified:Nov 21, 2024
    EPS:Oct 19, 2021
    EPSS Score:0.00037
    CVSS Score:6.4

    Affected Products

    Vendor
    Inhandnetworks
    Product
    Ir615
    Vendor
    Inhandnetworks
    Product
    Ir615 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-326 Inadequate Encryption Strength

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-112 Brute Force
    CAPEC-192 Protocol Analysis
    CAPEC-20 Encryption Brute Forcing

    Related CVEs

    CVE-2026-38703 (CVSS 9.8) — A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2026-38704 (CVSS 9.8) — A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.1…
    CVE-2026-38707 (CVSS 9.8) — A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, …
    CVE-2026-38702 (CVSS 9.8) — A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2021-38486 (CVSS 8) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration …
    CVE-2021-38478 (CVSS 9.1) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a trac…
    CVE-2021-38480 (CVSS 9.6) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forge…
    CVE-2021-38484 (CVSS 9.1) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to…
    CVE-2021-38482 (CVSS 8.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vuln…
    CVE-2021-38472 (CVSS 4.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FR…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High