InHand Networks InRouter

🗓️ 12 Jan 2023 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 43 Views

InHand Networks InRouter vulnerabilities: Remotely exploitable, allows OS command injection, lacks secure transmission and access control

Reporter	Title	Published	Views	Family All 60
BDU FSTEC	The vulnerability of Microprogrammed Software for InHand Networks’ InRouter 302 and InRouter 615 routers arises from the failure to take measures to neutralize special elements used in the operating system command. This vulnerability allows a perpetrator to execute arbitrary code.	19 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of InHand Networks InRouter 302 and InRouter 615 microprogrammed software lies in the use of one-way hashing with predictable random data. This allows attackers to gain unauthorized access to protected information.	3 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of InHand Networks InRouter 302 and InRouter 615 microprogrammed software lies in the use of an unencrypted data transmission channel by default. This allows attackers to gain unauthorized access to protected information or execute arbitrary commands.	3 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of InHand Networks InRouter 302 and InRouter 615’s microprogramming software, related to deficiencies in access control, allows attackers to execute arbitrary commands.	3 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of InHand Networks InRouter 302 and InRouter 615’s microprogramming software, which stems from the use of insufficiently random values, allows attackers to execute arbitrary code.	22 May 202300:00	–	bdu_fstec
Circl	CVE-2023-22598	17 Jan 202317:41	–	circl
Circl	CVE-2023-22600	16 May 202317:37	–	circl
Circl	CVE-2023-22601	16 May 202317:37	–	circl
CNNVD	InHand Networks InRouter302 安全漏洞	12 Jan 202300:00	–	cnnvd
CNNVD	InHand Networks InRouter302 安全漏洞	12 Jan 202300:00	–	cnnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-012-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-012-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

12 Jan 2023 00:00Current

8.9High risk

Vulners AI Score8.9

CVSS 3.19.1 - 10

EPSS0.0153

SSVC

inhand networks inrouter vulnerabilities exploitable remote command injection transmission access control