What is the severity of CVE-2021-38468?

CVE-2021-38468 is considered a moderate severity vulnerability due to the potential for session hijacking.

How do I fix CVE-2021-38468?

To fix CVE-2021-38468, upgrade the InHand Networks IR615 Router to versions later than 2.3.0.r4870.

What types of attacks can CVE-2021-38468 facilitate?

CVE-2021-38468 can facilitate stored cross-site scripting attacks that may enable session hijacking.

Which versions of IR615 Router are affected by CVE-2021-38468?

IR615 Router versions 2.3.0.r4724 and 2.3.0.r4870 are affected by CVE-2021-38468.

Who is affected by CVE-2021-38468?

Users of InHand Networks IR615 Routers running the vulnerable firmware versions are at risk due to CVE-2021-38468.

Vulnerability/
CVE-2021-38468

high

8.7

CWE

19/10/2021

16/9/2024

CVE-2021-38468: InHand Networks IR615 Router

First published: Tue Oct 19 2021(Updated: )

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may allow an attacker to hijack sessions of users connected to the system.

Credit: ics-cert@hq.dhs.gov

Affected Software	Affected Version	How to fix
InHand Networks IR615 Router
Inhand Networks IR615 Firmware	=2.3.0.r4724
Inhand Networks IR615 Firmware
Inhand Networks IR615 Firmware	=2.3.0.r4870

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

ICSA-21-280-05

Frequently Asked Questions

What is the severity of CVE-2021-38468?
CVE-2021-38468 is considered a moderate severity vulnerability due to the potential for session hijacking.
How do I fix CVE-2021-38468?
To fix CVE-2021-38468, upgrade the InHand Networks IR615 Router to versions later than 2.3.0.r4870.
What types of attacks can CVE-2021-38468 facilitate?
CVE-2021-38468 can facilitate stored cross-site scripting attacks that may enable session hijacking.
Which versions of IR615 Router are affected by CVE-2021-38468?
IR615 Router versions 2.3.0.r4724 and 2.3.0.r4870 are affected by CVE-2021-38468.
Who is affected by CVE-2021-38468?
Users of InHand Networks IR615 Routers running the vulnerable firmware versions are at risk due to CVE-2021-38468.

agent/type
agent/author
agent/weakness
agent/references
agent/description
agent/title
agent/severity
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/trending
agent/source
agent/tags
collector/ics-cert-advisory
source/ICS
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-index
vendor/inhand networks
canonical/inhand networks ir615 router
vendor/inhandnetworks
canonical/inhand networks ir615 firmware
version/inhand networks ir615 firmware/2.3.0.r4724
version/inhand networks ir615 firmware/2.3.0.r4870

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.