What is CVE-2021-38462?

CVE-2021-38462 is a critical-severity vulnerability in Inhand Networks Ir615 Router, classified under Weak Password Requirements. CVSS score: 9.8/10. Published 2021-10-19.

How severe is CVE-2021-38462?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Inhand Networks Ir615 Router

CVE-2021-38462

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and…

EPSS: 0.011 (62.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Inhand Networks Ir615 Router — versions 2.3.0.r4724 and 2.3.0.r4870
Inhandnetworks Ir615
Inhandnetworks Ir615_firmware — versions 2.3.0.r4724, 2.3.0.r4870

Weakness classification (CWE)

CWE-521 — Weak Password Requirements

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-38462?: CVE-2021-38462 is a critical-severity vulnerability in Inhand Networks Ir615 Router, classified under Weak Password Requirements. CVSS score: 9.8/10. Published 2021-10-19.
How severe is CVE-2021-38462?: Critical severity. CVSS v3 base score is 9.8 out of 10.