CVE Feed

    Dashboard / CVE / CVE-2021-38466

    CVE-2021-38466

    InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an attacker to run code on behalf of the client browser.

    Published:Oct 19, 2021
    Last Modified:Nov 21, 2024
    EPS:Oct 19, 2021
    EPSS Score:0.002
    CVSS Score:8.8

    Affected Products

    Vendor
    Inhandnetworks
    Product
    Ir615
    Vendor
    Inhandnetworks
    Product
    Ir615 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-38703 (CVSS 9.8) — A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2026-38704 (CVSS 9.8) — A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.1…
    CVE-2026-38707 (CVSS 9.8) — A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, …
    CVE-2026-38702 (CVSS 9.8) — A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2021-38486 (CVSS 8) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration …
    CVE-2021-38478 (CVSS 9.1) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a trac…
    CVE-2021-38480 (CVSS 9.6) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forge…
    CVE-2021-38484 (CVSS 9.1) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to…
    CVE-2021-38482 (CVSS 8.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vuln…
    CVE-2021-38472 (CVSS 4.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FR…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High