CVE-2021-38486

8.5 highEPSS 0.8%

High (8.5) in inhandnetworks ir615 firmware. EPSS 0.8% chance of exploitation in the next 30 days.

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an attacker to have full control over the product and execute code within the internal network to which the product is connected.

Severity

CVSS 3.1

8.5 high

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWEs: CWE-862, CWE-285
Published: 2021-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

inhandnetworks:ir615_firmware

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05

Check your stack JSON