CVE-2021-38476

🗓️ 19 Oct 2021 12:10:39Reported by icscertType

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an attacker to enumerate different user accounts

Reporter	Title	Published	Views	Family All 7
CNNVD	IR615 Router 安全漏洞	7 Oct 202100:00	–	cnnvd
CNVD	IR615 Router has an unspecified vulnerability (CNVD-2021-82944)	12 Oct 202100:00	–	cnvd
Cvelist	CVE-2021-38476 InHand Networks IR615 Router	19 Oct 202112:10	–	cvelist
EUVD	EUVD-2021-24928	7 Oct 202500:30	–	euvd
NVD	CVE-2021-38476	19 Oct 202113:15	–	nvd
OSV	CVE-2021-38476	19 Oct 202113:15	–	osv
Prion	Authentication flaw	19 Oct 202113:15	–	prion

NVD

Vulners

Node

inhandnetworks ir615_firmwareMatch2.3.0.r4724

AND

inhandnetworks ir615Match-

Node

inhandnetworks ir615_firmwareMatch2.3.0.r4870

AND

inhandnetworks ir615Match-

[
  {
    "product": "IR615 Router",
    "vendor": "InHand Networks",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.0.r4724 and 2.3.0.r4870"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-280-05

21 Nov 2024 06:17Current

5.7Medium risk

Vulners AI Score5.7

CVSS 25

CVSS 3.15.3 - 6.5

EPSS0.0015