CVE-2022-27273

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12168. This vulnerability is triggered via a crafted packet...

CVE-2022-27277

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub17C08...

CVE-2022-27270

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component ipsecsecrets. This vulnerability is triggered via a crafted packet...

CVE-2022-27274: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12028. This vulnerability is triggered via a crafted packet...

PT-2022-18351

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter 900 Industrial 4G Router versions prior to 1.0.0.r11700 Description The issue allows for arbitrary file deletion via the function sub 17C08. Recommendations For versions prior to 1.0.0.r11700, update to version...

CVE-2022-27268: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component getcgifrommemory. This vulnerability is triggered via a crafted packet...

CVE-2022-27272: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub1791C. This vulnerability is triggered via a crafted packet...

CVE-2022-27275: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub122D0. This vulnerability is triggered via a crafted packet...

CVE-2022-27273: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12168. This vulnerability is triggered via a crafted packet...

CVE-2022-27277: Improper Limitation of a Pathname to a Restricted Directory

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub17C08...

CVE-2022-27271: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet...

CVE-2022-27269: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component configovpn. This vulnerability is triggered via a crafted packet...

CVE-2022-27280: Improper Neutralization of Input During Web Page Generation

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

CVE-2022-27276: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub10F2C. This vulnerability is triggered via a crafted packet...

CVE-2022-27270: Improper Neutralization of Special Elements used in an OS Command

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component ipsecsecrets. This vulnerability is triggered via a crafted packet...

PT-2022-18346 · Inhand Networks · Inrouter 900 Industrial 4G Router

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter 900 Industrial 4G Router versions prior to v1.0.0.r11700 Description: The issue is related to a remote code execution RCE vulnerability. It is triggered via a crafted packet and involves the function sub 1791C...

CVE-2022-27279: Improper Limitation of a Pathname to a Restricted Directory

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub177E0...

PT-2022-18352

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter 900 Industrial 4G Router versions prior to v1.0.0.r11700 Description The issue allows for an arbitrary file read via the function sub 177E0. Recommendations For versions prior to v1.0.0.r11700, update to version...