PT-2021-22157 · Inhand Networks · Inhand Networks Ir615 Router

Published 2021-10-19 · Updated 2021-10-22 · CVE-2021-38482

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions InHand Networks IR615 Router versions 2.3.0.r4724 through 2.3.0.r4870

Description The issue affects the website used to control the router, making it vulnerable to stored cross-site scripting. This could allow an attacker to hijack sessions of users connected to the system.

Recommendations For versions 2.3.0.r4724 through 2.3.0.r4870, as a temporary workaround, consider restricting access to the router's control website to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-38482

Affected Products

Inhand Networks Ir615 Router

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-38482 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38482 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05 · Note