CVE-2021-38472

Name of the Vulnerable Software and Affected Versions InHand Networks IR615 Router versions 2.3.0.r4724 through 2.3.0.r4870

Description The management portal of the affected router does not contain an X-FRAME-OPTIONS header. This could be exploited by an attacker who sends a link to an administrator, framing the router's management portal and potentially luring the administrator into making changes.

Recommendations For versions 2.3.0.r4724 and 2.3.0.r4870, consider disabling access to the management portal until a patch is available that includes the X-FRAME-OPTIONS header. Restrict access to the management portal to minimize the risk of exploitation.