PT-2021-22146
CVE-2021-38472
·
تاريخ النشر
2021-10-19
·
تاريخ التحديث
2021-10-22
الوصف من
CVSS 3.1
4.7
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
InHand Networks IR615 Router versions 2.3.0.r4724 through 2.3.0.r4870
Description
The management portal of the affected router does not contain an X-FRAME-OPTIONS header. This could be exploited by an attacker who sends a link to an administrator, framing the router's management portal and potentially luring the administrator into making changes.
Recommendations
For versions 2.3.0.r4724 and 2.3.0.r4870, consider disabling access to the management portal until a patch is available that includes the X-FRAME-OPTIONS header.
Restrict access to the management portal to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾