Known vulnerabilities in IR615 Router 2.3.0.r4724

Vendor: InHand Networks
Software: IR615 Router
Version: 2.3.0.r4724
Software CPE: cpe:2.3:h:inhand_networks:ir615_router:*:*:*:*:*:*:*:*
Website: https://www.inhandnetworks.com/
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IR615 Router version 2.3.0.r4724 IR615 Router 2.3.0.r4724 is affected by 13 vulnerabilities: 1 high, 5 medium, 7 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57163 - Weak Password Requirements
CVE-2021-38462		 CWE-521 High
No
No
 - 08.10.2021 SB2021100808
#VU57162 - Observable Response Discrepancy
CVE-2021-38476		 CWE-204 Medium
No
No
 - 08.10.2021 SB2021100808
#VU57161 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38468		 CWE-79 Low
No
No
 - 08.10.2021 SB2021100808
#VU57160 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38482		 CWE-79 Low
No
No
 - 08.10.2021 SB2021100808
#VU57159 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-38478		 CWE-78 Low
No
No
 - 08.10.2021 SB2021100808
#VU57158 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-38470		 CWE-78 Low
No
No
 - 08.10.2021 SB2021100808
#VU57157 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38466		 CWE-79 Low
No
No
 - 08.10.2021 SB2021100808
#VU57156 - Unrestricted Upload of File with Dangerous Type
CVE-2021-38484		 CWE-434 Low
No
No
 - 08.10.2021 SB2021100808
#VU57155 - Improper Restriction of Excessive Authentication Attempts
CVE-2021-38474		 CWE-307 Medium
No
No
 - 08.10.2021 SB2021100808
#VU57154 - Inadequate Encryption Strength
CVE-2021-38464		 CWE-326 Medium
No
No
 - 08.10.2021 SB2021100808
#VU57153 - Cross-Site Request Forgery (CSRF)
CVE-2021-38480		 CWE-352 Low
No
No
 - 08.10.2021 SB2021100808
#VU57152 - Improper Authorization
CVE-2021-38486		 CWE-285 Medium
No
No
 - 08.10.2021 SB2021100808
#VU57151 - Improper Restriction of Rendered UI Layers or Frames
CVE-2021-38472		 CWE-1021 Medium
No
No
 - 08.10.2021 SB2021100808