CVE-2022-27280

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

PT-2022-18354 · Inhand Networks · Inrouter 900 Industrial 4G Router

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter 900 Industrial 4G Router versions prior to 1.0.0.r11700 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the web exec parameter at the...

PT-2022-18351

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter 900 Industrial 4G Router versions prior to 1.0.0.r11700 Description The issue allows for arbitrary file deletion via the function sub 17C08. Recommendations For versions prior to 1.0.0.r11700, update to version...

PT-2022-18352

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter 900 Industrial 4G Router versions prior to v1.0.0.r11700 Description The issue allows for an arbitrary file read via the function sub 177E0. Recommendations For versions prior to v1.0.0.r11700, update to version...

CVE-2022-27268: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component getcgifrommemory. This vulnerability is triggered via a crafted packet...

CVE-2022-27269: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component configovpn. This vulnerability is triggered via a crafted packet...

CVE-2022-27271: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...

CVE-2022-27270: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component ipsecsecrets. This vulnerability is triggered via a crafted packet...

CVE-2022-27273: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12168. This vulnerability is triggered via a crafted packet...

CVE-2022-27274: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12028. This vulnerability is triggered via a crafted packet...

CVE-2022-27272: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub1791C. This vulnerability is triggered via a crafted packet...

CVE-2022-27275: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub122D0. This vulnerability is triggered via a crafted packet...

CVE-2022-27277: Improper Limitation of a Pathname to a Restricted Directory

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub17C08...

CVE-2022-27276: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub10F2C. This vulnerability is triggered via a crafted packet...

CVE-2022-27279: Improper Limitation of a Pathname to a Restricted Directory

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub177E0...

CVE-2022-27280: Improper Neutralization of Input During Web Page Generation

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL OS Command Injection Vulnerability

Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL are both 4G/4.5G, WiFi and Vpn technology based mobile network routers from Ricon Mobile Canada.Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL are vulnerable to OS command injection, which can be exploited by...

Verizon’s Visible Wireless Carrier Confirms Credential-Stuffing Attack

On Wednesday, Verizon’s Visible – an all-digital, uber-cheap wireless carrier – confirmed what customers have been complaining about on Reddit and Twitter all week: They lost control of their accounts; had their passwords and shipping addresses changed; and some got stuck with bills for pricey ne...

IR615 Router authorization issue vulnerability

The IR615 Router is a 4G industrial router from Rimu Technologies of China. The IR615 Router is vulnerable to an authorization issue that could be exploited by an attacker to take full control of the product and execute code on the internal network to which the product is connected...

IR615 Router Cross-site Request Forgery Vulnerability

The IR615 Router is a 4G industrial router from Rimu Technologies, China. IR615 Router is vulnerable to cross-site request forgery, which can be exploited by attackers to remotely execute operations on the router's management portal...