CVE-2021-38473

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The affected product’s code base doesn’t properly control arguments for specific functions, which could lead to a stack overflow.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Oct 22, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-384749.8InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the CVE-2021-384758.8The database connection to the server is performed by calling a specific API, which could allow an unprivileged user to gain SYSDBA permissiCVE-2021-384765.3InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence ofCVE-2021-384779.8There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the manipulCVE-2021-384789.1InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commandsCVE-2021-384797.5Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker cCVE-2021-38485.5An arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service, Worry-Free Business SecuritCVE-2021-384808.8InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands CVE-2021-384819.8The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID CVE-2021-384824.8InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scCVE-2021-384835.7The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwriCVE-2021-384847.2InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload o
CVE-2021-38473: High severity, CVSS 8.8 | Vulnix