CVE-2026-38718

Katalog CVE

CVSS 7.5 · High EPSS 0,46%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada inhandnetworks ir915l-fq39-s firmware, inhandnetworks ir912l-fq58 firmware. Skor CVSS 3.1 7.5 (High) menurut CISA ADP.

Deskripsi (NVD)

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a buffer overflow vulnerability in the device registration function. This vulnerability could allow an attacker to cause a denial of service attack on the remote target device.

Rincian

Terbit di NVD

18 Juni 2026

Terakhir diubah

22 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 37,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.inhand.com/wp-content/uploads/2026/06/InHand-PSA-2026-06_EN.pdf advisory vendor