Inrouter 900 Firmware vulnerabilities

10 known vulnerabilities in Inrouter 900 Firmware from Inhandnetworks. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Inrouter 900 Firmware: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-27277Apr 10, 2022InhandnetworksEPSS 1.37%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub_17C08.

• 9.8 Critical severity

  Inrouter 900 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27276Apr 10, 2022InhandnetworksEPSS 3.57%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_10F2C. This vulnerability is triggered via a crafted packet.

• 9.8 Critical severity

  Inrouter 900 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27275Apr 10, 2022InhandnetworksEPSS 3.47%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_122D0. This vulnerability is triggered via a crafted packet.

• 9.8 Critical severity

  Inrouter 900 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27274Apr 10, 2022InhandnetworksEPSS 3.47%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12028. This vulnerability is triggered via a crafted packet.

• 9.8 Critical severity

  Inrouter 900 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27273Apr 10, 2022InhandnetworksEPSS 3.47%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12168. This vulnerability is triggered via a crafted packet.

• 9.8 Critical severity

  Inrouter 900 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27272Apr 10, 2022InhandnetworksEPSS 3.47%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_1791C. This vulnerability is triggered via a crafted packet.

• 9.8 Critical severity

  Inrouter 900 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27271Apr 10, 2022InhandnetworksEPSS 3.47%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component python-lib. This vulnerability is triggered via a crafted packet.

• 9.8 Critical severity

  Inrouter 900 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27270Apr 10, 2022InhandnetworksEPSS 3.47%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component ipsec_secrets. This vulnerability is triggered via a crafted packet.

• 9.8 Critical severity

  Inrouter 900 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27269Apr 10, 2022InhandnetworksEPSS 3.83%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component config_ovpn. This vulnerability is triggered via a crafted packet.

• 9.8 Critical severity

  Inrouter 900 Firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-27268Apr 10, 2022InhandnetworksEPSS 3.83%

  InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component get_cgi_from_memory. This vulnerability is triggered via a crafted packet.