IF
Product
Ir615 Firmware
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 4Medium 5Low 0
Watch
Add Ir615 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-38707 | 9.8 | May 28 | A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware… Affected: before 1.0.121 |
| CVE-2026-38704 | 9.8 | May 28 | A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware… Affected: before 1.0.121 |
| CVE-2026-38703 | 9.8 | May 28 | A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware… Affected: before 1.0.121 |
| CVE-2026-38702 | 9.8 | May 28 | A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware… Affected: before 1.0.121 |
| CVE-2021-38474 | 9.8 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38462 | 9.8 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38478 | 9.1 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38470 | 9.1 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38480 | 8.8 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web… Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38486 | 8.5 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an… Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38464 | 7.4 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal… Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38484 | 7.2 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which… Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38466 | 6.1 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38476 | 5.3 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38482 | 4.8 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scripting, which may allow an attacker to… Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38468 | 4.8 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may allow an attacker to hijack sessions of users connected to… Affected: 2.3.0.r4724; 2.3.0.r4870 |
| CVE-2021-38472 | 4.7 | Oct 19 | InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTIONS header, which an attacker may take advantage of by… Affected: 2.3.0.r4724; 2.3.0.r4870 |
Showing 17