CVE-2022-27272

CVE-2022-27272 affects InHand Networks InRouter 900 Industrial 4G Router up to version v1.0.0.r11700. The vulnerability is an RCE triggered by a crafted packet via function sub_1791C. Affected component is the router’s firmware; impact is remote code execution with potential full compromise. Reme...

CVE-2022-27272

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub1791C. This vulnerability is triggered via a crafted packet...

CVE-2022-27273

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12168. This vulnerability is triggered via a crafted packet...

CVE-2022-27275

CVE-2022-27275 affects InHand Networks InRouter 900 Industrial 4G Router. A remote code execution vulnerability exists in the vulnerable function sub_122D0, triggered by a crafted packet. Impact is RCE on affected devices. Affected versions are prior to v1.0.0.r11700. Mitigation: update to v1.0.0...

CVE-2022-27274

CVE-2022-27274 affects InHand Networks InRouter 900 Industrial 4G Router. A remote code execution vulnerability exists in the function sub_12028 that can be triggered by a crafted packet. Affected versions are prior to 1.0.0.r11700. The Red Hat and other records corroborate the same vulnerability...

CVE-2022-27275

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub122D0. This vulnerability is triggered via a crafted packet...

CVE-2022-27274

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12028. This vulnerability is triggered via a crafted packet...

CVE-2022-27276

CVE-2022-27276 affects InHand Networks InRouter 900 Industrial 4G Router. The vulnerability is a remote code execution via function sub_10F2C triggered by a crafted packet. Affected versions are prior to 1.0.0.r11700; remediation is to upgrade to 1.0.0.r11700 or later. Documented impact is high/c...

CVE-2022-27277

The CVE-2022-27277 entry concerns InHand Networks InRouter 900 Industrial 4G Router. A vulnerability in the function sub_17C08 allows arbitrary file deletion. Affected product: InRouter 900 Industrial 4G Router prior to version v1.0.0.r11700. Impact and exposure per the connected data indicate ne...

CVE-2022-27276

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub10F2C. This vulnerability is triggered via a crafted packet...

CVE-2022-27277

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub17C08...

CVE-2022-27279

InHand Networks InRouter 900 Industrial 4G Router is affected by CVE-2022-27279. The vulnerability allows an arbitrary file read via the function sub_177E0 in firmware prior to version 1.0.0.r11700. Affected product is the InRouter 900 Industrial 4G Router; the underlying root cause is an insecur...

CVE-2022-27279

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub177E0...

CVE-2022-27280

The CVE-2022-27280 issue affects InHand Networks InRouter 900 Industrial 4G Router. A stored cross-site scripting (XSS) vulnerability exists in the web_exec parameter of the /apply.cgi endpoint. Affected versions are prior to 1.0.0.r11700. Root cause is unvalidated input being processed in the we...

CVE-2022-27280

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

CVE-2022-27277: Improper Limitation of a Pathname to a Restricted Directory

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub17C08...

CVE-2022-27279: Improper Limitation of a Pathname to a Restricted Directory

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub177E0...

PT-2022-18351

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter 900 Industrial 4G Router versions prior to 1.0.0.r11700 Description The issue allows for arbitrary file deletion via the function sub 17C08. Recommendations For versions prior to 1.0.0.r11700, update to version...

PT-2022-18352

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter 900 Industrial 4G Router versions prior to v1.0.0.r11700 Description The issue allows for an arbitrary file read via the function sub 177E0. Recommendations For versions prior to v1.0.0.r11700, update to version...

PT-2022-18354 · Inhand Networks · Inrouter 900 Industrial 4G Router

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter 900 Industrial 4G Router versions prior to 1.0.0.r11700 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the web exec parameter at the...