Vulnerability Details CVE-2021-38466
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. This may allow an attacker to perform a reflected cross-site scripting attack, which could allow an attacker to run code on behalf of the client browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.4%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 4.3
References
Products affected by CVE-2021-38466
-
cpe:2.3:h:inhandnetworks:ir615:-
-
cpe:2.3:o:inhandnetworks:ir615_firmware:2.3.0.r4724
-
cpe:2.3:o:inhandnetworks:ir615_firmware:2.3.0.r4870