Inadequate Encryption Strength in IR615 Router - CVE-2021-38464
Published: October 8, 2021
Vulnerability identifier: #VU57154
CSH Severity: Medium
CVSSv4.0: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2021-38464
CWE-ID: CWE-326
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerable software:
IR615 Router
IR615 Router
Software vendor:
InHand Networks
InHand Networks
Description
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to inadequate encryption strength. A remote attacker on the local network can intercept the communication and steal sensitive information or hijack the session.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.