CVE Feed

    Dashboard / CVE / CVE-2021-38480

    CVE-2021-38480

    InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web application trusts. This may allow an attacker to remotely perform actions on the router’s management portal, such as making configuration changes, changing administrator credentials, and running system commands on the router.

    Published:Oct 19, 2021
    Last Modified:Nov 21, 2024
    EPS:Oct 19, 2021
    EPSS Score:0.00091
    CVSS Score:9.6

    Affected Products

    Vendor
    Inhandnetworks
    Product
    Ir615
    Vendor
    Inhandnetworks
    Product
    Ir615 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-38703 (CVSS 9.8) — A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2026-38704 (CVSS 9.8) — A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.1…
    CVE-2026-38707 (CVSS 9.8) — A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, …
    CVE-2026-38702 (CVSS 9.8) — A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.10…
    CVE-2021-38486 (CVSS 8) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration …
    CVE-2021-38478 (CVSS 9.1) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a trac…
    CVE-2021-38484 (CVSS 9.1) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to…
    CVE-2021-38482 (CVSS 8.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vuln…
    CVE-2021-38472 (CVSS 4.7) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FR…
    CVE-2021-38476 (CVSS 6.5) — InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High