CVE-2021-38474: InHand Networks IR615 Router
First published: Thu Oct 07 2021(Updated: )
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. This may allow an attacker to execute a brute-force password attack with no time limitation and without harming the normal operation of the user. This could allow an attacker to gain valid credentials for the product interface.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| InHand Networks IR615 Router | ||
| Inhand Networks IR615 Firmware | =2.3.0.r4724 | |
| Inhand Networks IR615 Firmware | ||
| Inhand Networks IR615 Firmware | =2.3.0.r4870 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-38474?
CVE-2021-38474 is classified as a medium-severity vulnerability due to the lack of an account lockout policy, allowing for potential brute-force attacks.
How do I fix CVE-2021-38474?
To mitigate CVE-2021-38474, implement an account lockout policy on the InHand Networks IR615 Router and ensure to update to the latest firmware version.
Which versions of the InHand Networks IR615 Router are affected by CVE-2021-38474?
CVE-2021-38474 affects the InHand Networks IR615 Router firmware versions 2.3.0.r4724 and 2.3.0.r4870.
Can CVE-2021-38474 lead to unauthorized access?
Yes, CVE-2021-38474 can potentially allow attackers to gain unauthorized access through brute-force password attempts.
Is there a patch available for CVE-2021-38474?
Yes, users should check for firmware updates that address the vulnerability in the InHand Networks IR615 Router.
- agent/type
- agent/author
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/inhand networks
- canonical/inhand networks ir615 router
- vendor/inhandnetworks
- canonical/inhand networks ir615 firmware
- version/inhand networks ir615 firmware/2.3.0.r4724
- version/inhand networks ir615 firmware/2.3.0.r4870