CVE-2021-38484: InHand Networks IR615 Router
First published: Tue Oct 19 2021(Updated: )
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which may allow an attacker, acting as an administrator, to upload malicious files. This could result in cross-site scripting, deletion of system files, and remote code execution.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Inhandnetworks Ir615 Firmware | =2.3.0.r4724 | |
| Inhandnetworks Ir615 | ||
| Inhandnetworks Ir615 Firmware | =2.3.0.r4870 | |
| InHand Networks IR615 Router: Versions 2.3.0.r5417 and prior |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-38484?
CVE-2021-38484 is a vulnerability in the InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 that allows an attacker to upload malicious files.
What is the severity of CVE-2021-38484?
CVE-2021-38484 has a severity rating of 7.2, which is classified as critical.
How does CVE-2021-38484 impact the InHand Networks IR615 Router?
CVE-2021-38484 allows an attacker, acting as an administrator, to upload malicious files to the router, which can lead to cross-site scripting and other security issues.
Is the InHand Networks IR615 Router version 2.3.0.r4724 vulnerable to CVE-2021-38484?
Yes, the InHand Networks IR615 Router version 2.3.0.r4724 is vulnerable to CVE-2021-38484.
Is there a fix for CVE-2021-38484?
At the moment, there is no specific fix available for CVE-2021-38484. It is recommended to update to a secure version if one becomes available or follow the guidance provided by the vendor.
- collector/nvd-index
- agent/type
- agent/author
- agent/weakness
- agent/references
- agent/description
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/title
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/trending
- vendor/inhandnetworks
- canonical/inhandnetworks ir615 firmware
- version/inhandnetworks ir615 firmware/2.3.0.r4724
- canonical/inhandnetworks ir615
- version/inhandnetworks ir615 firmware/2.3.0.r4870
- vendor/inhand networks
- canonical/inhand networks ir615 router: versions 2.3.0.r5417 and prior