VULNERABILITY INTELLIGENCE

CVE-2021-38462

CVSS score9.8 CRITICAL
EPSS probability1.18%
CISA KEVNot currently listed
Published2021-10-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform operations on their behalf.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-521
  • nvd@nist.gov: CWE-521

Primary references