CVE Feed

    Dashboard / CVE / CVE-2021-38478

    CVE-2021-38478

    InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device.

    Published:Oct 19, 2021
    Last Modified:Nov 21, 2024
    EPS:Oct 19, 2021
    EPSS Score:0.0037
    CVSS Score:9.1

    Affected Products

    Vendor
    Inhandnetworks
    Product
    Ir615
    Vendor
    Inhandnetworks
    Product
    Ir615 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-38703 (CVSS 9.8) — A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2026-38704 (CVSS 9.8) — A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.1…
    CVE-2026-38707 (CVSS 9.8) — A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, …
    CVE-2026-38702 (CVSS 9.8) — A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2021-38486 (CVSS 8) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration …
    CVE-2021-38480 (CVSS 9.6) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forge…
    CVE-2021-38484 (CVSS 9.1) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to…
    CVE-2021-38482 (CVSS 8.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vuln…
    CVE-2021-38472 (CVSS 4.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FR…
    CVE-2021-38476 (CVSS 6.5) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High