CVE Feed

    Dashboard / CVE / CVE-2021-38474

    CVE-2021-38474

    InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. This may allow an attacker to execute a brute-force password attack with no time limitation and without harming the normal operation of the user. This could allow an attacker to gain valid credentials for the product interface.

    Published:Oct 19, 2021
    Last Modified:Nov 21, 2024
    EPS:Oct 19, 2021
    EPSS Score:0.0016
    CVSS Score:6.3

    Affected Products

    Vendor
    Inhandnetworks
    Product
    Ir615
    Vendor
    Inhandnetworks
    Product
    Ir615 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-38703 (CVSS 9.8) — A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2026-38704 (CVSS 9.8) — A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.1…
    CVE-2026-38707 (CVSS 9.8) — A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, …
    CVE-2026-38702 (CVSS 9.8) — A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2021-38486 (CVSS 8) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration …
    CVE-2021-38478 (CVSS 9.1) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a trac…
    CVE-2021-38480 (CVSS 9.6) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forge…
    CVE-2021-38484 (CVSS 9.1) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to…
    CVE-2021-38482 (CVSS 8.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vuln…
    CVE-2021-38472 (CVSS 4.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FR…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High