VULNERABILITY INTELLIGENCE

CVE-2021-38464

CVSS score6.4 MEDIUM

EPSS probability0.33%

CISA KEVNot currently listed

Published2021-10-19

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Description

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.

Weakness classification

CWE-326: Inadequate Encryption Strength

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource