InHand Networks InRouter
Successful exploitation of these vulnerabilities could allow a message queuing telemetry transport (MQTT) command injection, unauthorized disclosure of sensitive device information, and remote code execution. If properly chained, these vulnerabilities could result in an unauthorized remote user fully compromising every cloud-managed InHand Networks device reachable by the cloud.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-22601US | high8.6OT erhöht | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently R… | ||||
| CVE-2023-22600US | high8.1 | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control… | ||||
| CVE-2023-22599US | critical9.1 | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash w… | ||||
| CVE-2023-22598US | high7.2 | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization… | ||||
| CVE-2023-22597US | medium5.9OT erhöht | — | ||
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (10)
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 302
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
- MitigationInRouter 615
To access the updates, users should go to “Documentation → Firmware” on the product page.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan