Lucene search

IcscertCVE-2021-38464

HistoryOct 19, 2021 - 1:15 p.m.

CVE-2021-38464

2021-10-1913:15:10

CWE-326

icscert

web.nvd.nist.gov

inhand networks

ir615 router

encryption

interception

theft

vulnerability

cve-2021-38464

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.2%

JSON

InHand Networks IR615 Router’s Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.

Affected configurations

Nvd

Node

inhandnetworksir615_firmwareMatch2.3.0.r4724

AND

inhandnetworksir615Match-

Node

inhandnetworksir615_firmwareMatch2.3.0.r4870

AND

inhandnetworksir615Match-

VendorProductVersionCPE
inhandnetworksir615_firmware2.3.0.r4724cpe:2.3:o:inhandnetworks:ir615_firmware:2.3.0.r4724:*:*:*:*:*:*:*
inhandnetworksir615-cpe:2.3:h:inhandnetworks:ir615:-:*:*:*:*:*:*:*
inhandnetworksir615_firmware2.3.0.r4870cpe:2.3:o:inhandnetworks:ir615_firmware:2.3.0.r4870:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
inhandnetworks	ir615_firmware	2.3.0.r4724	cpe:2.3:o:inhandnetworks:ir615_firmware:2.3.0.r4724:::::::*
inhandnetworks	ir615	-	cpe:2.3:h:inhandnetworks:ir615:-:::::::*
inhandnetworks	ir615_firmware	2.3.0.r4870	cpe:2.3:o:inhandnetworks:ir615_firmware:2.3.0.r4870:::::::*

CNA Affected

[
  {
    "product": "IR615 Router",
    "vendor": "InHand Networks",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.0.r4724 and 2.3.0.r4870"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-280-05

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.2%

JSON

Related for CVE-2021-38464