CVE-2021-38484
InHand Networks IR615 Router
- State
- Published
- Severity
- 9.1 Critical
- Published
- Oct 19, 2021
- Updated
- Sep 16, 2024
- Reserved
- Aug 10, 2021
Description
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which may allow an attacker, acting as an administrator, to upload malicious files. This could result in cross-site scripting, deletion of system files, and remote code execution.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.1 Critical | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H | icscert |
Weaknesses
- CWE-434 UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE CWE-434
Affected Products
| Product | Versions |
|---|---|
IR615 RouterInHand Networks |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.