CVE-2022-27271

CVE-2022-27271 affects InHand Networks InRouter 900 Industrial 4G Router. The vulnerability is an RCE via the python-lib component, triggered by a crafted packet. Affected firmware versions are prior to v1.0.0.r11700. Public sources in the connected documents (Red Hat, PT-Platform) corroborate th...

CVE-2022-27272

CVE-2022-27272 affects InHand Networks InRouter 900 Industrial 4G Router up to version v1.0.0.r11700. The vulnerability is an RCE triggered by a crafted packet via function sub_1791C. Affected component is the router’s firmware; impact is remote code execution with potential full compromise. Reme...

CVE-2022-27272

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub1791C. This vulnerability is triggered via a crafted packet...

CVE-2022-27273

InHand Networks InRouter 900 Industrial 4G Router is affected by CVE-2022-27273. The vulnerability allows remote code execution via the function sub_12168 when processing a crafted packet, affecting versions prior to 1.0.0.r11700. Remediation is to update to version 1.0.0.r11700 or later. Other s...

CVE-2022-27273

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12168. This vulnerability is triggered via a crafted packet...

CVE-2022-27275

CVE-2022-27275 affects InHand Networks InRouter 900 Industrial 4G Router. A remote code execution vulnerability exists in the vulnerable function sub_122D0, triggered by a crafted packet. Impact is RCE on affected devices. Affected versions are prior to v1.0.0.r11700. Mitigation: update to v1.0.0...

CVE-2022-27274

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12028. This vulnerability is triggered via a crafted packet...

CVE-2022-27275

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub122D0. This vulnerability is triggered via a crafted packet...

CVE-2022-27274

CVE-2022-27274 affects InHand Networks InRouter 900 Industrial 4G Router. A remote code execution vulnerability exists in the function sub_12028 that can be triggered by a crafted packet. Affected versions are prior to 1.0.0.r11700. The Red Hat and other records corroborate the same vulnerability...

CVE-2022-27276

CVE-2022-27276 affects InHand Networks InRouter 900 Industrial 4G Router. The vulnerability is a remote code execution via function sub_10F2C triggered by a crafted packet. Affected versions are prior to 1.0.0.r11700; remediation is to upgrade to 1.0.0.r11700 or later. Documented impact is high/c...

CVE-2022-27276

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub10F2C. This vulnerability is triggered via a crafted packet...

CVE-2022-27277

The CVE-2022-27277 entry concerns InHand Networks InRouter 900 Industrial 4G Router. A vulnerability in the function sub_17C08 allows arbitrary file deletion. Affected product: InRouter 900 Industrial 4G Router prior to version v1.0.0.r11700. Impact and exposure per the connected data indicate ne...

CVE-2022-27277

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub17C08...

CVE-2022-27279

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub177E0...

CVE-2022-27279

InHand Networks InRouter 900 Industrial 4G Router is affected by CVE-2022-27279. The vulnerability allows an arbitrary file read via the function sub_177E0 in firmware prior to version 1.0.0.r11700. Affected product is the InRouter 900 Industrial 4G Router; the underlying root cause is an insecur...

CVE-2022-27280

The CVE-2022-27280 issue affects InHand Networks InRouter 900 Industrial 4G Router. A stored cross-site scripting (XSS) vulnerability exists in the web_exec parameter of the /apply.cgi endpoint. Affected versions are prior to 1.0.0.r11700. Root cause is unvalidated input being processed in the we...

CVE-2022-27280

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting XSS vulnerability via the webexec parameter at /apply.cgi...

InHand Networks InRouter 900 操作系统命令注入漏洞

The InHand Networks InRouter 900 is a series of industrial routers from InHand Networks, U.S.A. A security vulnerability exists in the InHand Networks InRouter 900 Industrial 4G Router, and no details of the vulnerability are currently available...

PT-2022-18354 · Inhand Networks · Inrouter 900 Industrial 4G Router

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter 900 Industrial 4G Router versions prior to 1.0.0.r11700 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the web exec parameter at the...

InHand Networks InRouter 900 操作系统命令注入漏洞

The InHand Networks InRouter 900 is a series of industrial routers from InHand Networks, U.S.A. A security vulnerability exists in the InHand Networks InRouter 900 Industrial 4G Router, and no details of the vulnerability are currently available...