InHand Networks InRouter
Successful exploitation of these vulnerabilities could allow a message queuing telemetry transport (MQTT) command injection, unauthorized disclosure of sensitive device information, and remote code execution. If properly chained, these vulnerabilities could result in an unauthorized remote user fully compromising every cloud-managed InHand Networks device reachable by the cloud.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-22601US | high8.6OT elevated | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently R… | ||||
| CVE-2023-22600US | high8.1 | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control… | ||||
| CVE-2023-22599US | critical9.1 | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash w… | ||||
| CVE-2023-22598US | high7.2 | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization… | ||||
| CVE-2023-22597US | medium5.9OT elevated | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission… | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan