VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Oct 19, 2021· Updated Jun 17, 2026

CVE-2021-38484

CVE-2021-38484

Description

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which may allow an attacker, acting as an administrator, to upload malicious files. This could result in cross-site scripting, deletion of system files, and remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • InHand Networks/Ir615 Firmware2 versions
    cpe:2.3:o:inhandnetworks:ir615_firmware:2.3.0.r4724:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:inhandnetworks:ir615_firmware:2.3.0.r4724:*:*:*:*:*:*:*
    • cpe:2.3:o:inhandnetworks:ir615_firmware:2.3.0.r4870:*:*:*:*:*:*:*
  • InHand Networks/Ir615 Routerllm-fuzzy2 versions
    2.3.0.r4724, 2.3.0.r4870+ 1 more
    • (no CPE)range: 2.3.0.r4724, 2.3.0.r4870
    • (no CPE)range: 2.3.0.r4724 and 2.3.0.r4870

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.