Vulnerability identifier: #VU57163
Vulnerability risk: High
Exploitation vector: Network
Exploit availability: No
Vendor: InHand Networks
The vulnerability allows a remote attacker to perform brute-force attack and guess the password.
The vulnerability exists due to weak password requirements. A remote attacker can enumerate passwords and impersonate other application users and perform operations on their behalf.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versions
IR615 Router: 2.3.0.r4724 - 2.3.0.r4870
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.