CVE-2021-38480: InHand Networks IR615 Router

First published: Tue Oct 19 2021(Updated: )

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web application trusts. This may allow an attacker to remotely perform actions on the router’s management portal, such as making configuration changes, changing administrator credentials, and running system commands on the router.

Credit: ics-cert@hq.dhs.gov

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/author
• agent/weakness
• agent/references
• agent/description
• collector/ics-cert-advisory
• source/ICS
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• agent/title
• agent/severity
• agent/softwarecombine
• agent/tags
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/first-publish-date
• agent/event
• agent/trending
• vendor/inhandnetworks
• canonical/inhandnetworks ir615 firmware
• version/inhandnetworks ir615 firmware/2.3.0.r4724
• canonical/inhandnetworks ir615
• version/inhandnetworks ir615 firmware/2.3.0.r4870
• vendor/inhand networks
• canonical/inhand networks ir615 router: versions 2.3.0.r5417 and prior