CVE-2021-38462

Publication date

2021-10-19 12:10:32

Family

icscert

State

PUBLISHED

Description

InHand Networks IR615 Routers Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obtained user credentials to enumerate passwords and impersonate other application users and perform operations on their behalf.