CVE-2021-38481

The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string.

• CWE-89

• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01Third Party Advisory, US Government Resource
• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01Third Party Advisory, US Government Resource

Published

Oct 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38476InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…5.3
• CVE-2021-38477There are multiple API function codes that permit reading an…9.8
• CVE-2021-38478InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…9.1
• CVE-2021-38479Many API function codes receive raw pointers remotely from t…7.5
• CVE-2021-3848An arbitrary file creation by privilege escalation vulnerabi…5.5
• CVE-2021-38480InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…8.8
• CVE-2021-38482InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…4.8
• CVE-2021-38483The affected product is vulnerable to misconfigured binaries…5.7
• CVE-2021-38484InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…7.2
• CVE-2021-38485The affected product is vulnerable to improper input validat…8.8
• CVE-2021-38486InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…8.5
• CVE-2021-38487RTI Connext Professional versions 4.1 to 6.1.0, and Connext …9.1