PT-2021-22144
CVE-2021-38470
·
تاريخ النشر
2021-10-19
·
تاريخ التحديث
2021-10-22
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
InHand Networks IR615 Router versions 2.3.0.r4724 through 2.3.0.r4870
Description
The issue allows an attacker to inject commands into the device using a ping tool, potentially enabling the attacker to remotely run commands on behalf of the device.
Recommendations
For versions 2.3.0.r4724 and 2.3.0.r4870, consider restricting access to the device to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of ping tools on the network to prevent potential command injection.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾