PT-2021-22152
CVE-2021-38478
·
تاريخ النشر
2021-10-19
·
تاريخ التحديث
2021-10-25
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
InHand Networks IR615 Router versions 2.3.0.r4724 through 2.3.0.r4870
Description
The issue allows an attacker to use a traceroute tool to inject commands into the device, potentially enabling remote command execution on behalf of the device.
Recommendations
For versions 2.3.0.r4724 and 2.3.0.r4870, consider restricting access to the device to minimize the risk of exploitation until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾