CVE Vulnerabilities

CVE-2021-38464

Inadequate Encryption Strength

Published: Oct 19, 2021 | Modified: Oct 22, 2021
CVSS 3.x
7.4
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

InHand Networks IR615 Routers Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.

Weakness

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

Affected Software

Name Vendor Start Version End Version
Ir615_firmware Inhandnetworks 2.3.0.r4724 (including) 2.3.0.r4724 (including)

Potential Mitigations

References