Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 64

Export CSV
CVE-2021-38468

InHand Networks IR615 Router

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may allow an attacker to hijack sessions of users connected to the system.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Inhandnetworks
Products
Ir615 Ir615 Firmware
CVE-2021-38466

InHand Networks IR615 Router

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an attacker to run code on behalf of the client browser.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Inhandnetworks
Products
Ir615 Ir615 Firmware
CVE-2021-38464

InHand Networks IR615 Router

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Inhandnetworks
Products
Ir615 Ir615 Firmware
CVE-2021-38462

InHand Networks IR615 Router

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform operations on their behalf.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Inhandnetworks
Products
Ir615 Ir615 Firmware