CVE-2021-38462
—CVSS 3.1
9.8 critical
EPSS
1%p66
Published
()
Modified
Description
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform operations on their behalf.
- Vendors
- inhandnetworks
- Products
- ir615 firmware
- Weakness
- CWE-521
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.