Read the docs
TI-2025-33452 Aliases CVE-2025-53507GHSA-5r7x-gv34-x2cp

Insecure storage of sensitive information in iND Co.,Ltd HL330-DLS

Priority LOW 31CWE-922Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-922.

Summary

Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status].

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00305 23rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
iND Co.,LtdHL330-DLS (for module MC7700)firmware version 1.03 and earlier—No fix listedCNA
iND Co.,LtdHL330-DLS (for module MC7330)firmware version 2.02t and earlier—No fix listedCNA
iND Co.,LtdHL320-DLS (for module MC7700)firmware version 1.03 and earlier—No fix listedCNA
iND Co.,LtdHL320-DLS (for module MC7330)firmware version 2.02t and earlier—No fix listedCNA
iND Co.,LtdLM-100firmware version 1.02 and earlier—No fix listedCNA
iND Co.,LtdLM-200 (for module AMP570)firmware version 1.02 and earlier—No fix listedCNA
iND Co.,LtdLM-200 (for module EC25-J)firmware version 1.05e and earlier—No fix listedCNA
iND Co.,LtdL2X Assistfirmware version 2.01 and earlier—No fix listedCNA
iND Co.,LtdL2X Assist-RS-Afirmware version 1.11 and earlier—No fix listedCNA
iND Co.,LtdL2X Assist-RS-Efirmware version 1.12 and earlier—No fix listedCNA
iND Co.,LtdF2L Assist-SS-Afirmware version 1.03 and earlier—No fix listedCNA
iND Co.,LtdF2L Assist-SS-Efirmware version 1.01 and earlier—No fix listedCNA
  • HL330-DLS (for module MC7700) VendoriND Co.,Ltd Affected firmware version 1.03 and earlier Fixed in — No fix listed CNA
  • HL330-DLS (for module MC7330) VendoriND Co.,Ltd Affected firmware version 2.02t and earlier Fixed in — No fix listed CNA
  • HL320-DLS (for module MC7700) VendoriND Co.,Ltd Affected firmware version 1.03 and earlier Fixed in — No fix listed CNA
  • HL320-DLS (for module MC7330) VendoriND Co.,Ltd Affected firmware version 2.02t and earlier Fixed in — No fix listed CNA
  • LM-100 VendoriND Co.,Ltd Affected firmware version 1.02 and earlier Fixed in — No fix listed CNA
  • LM-200 (for module AMP570) VendoriND Co.,Ltd Affected firmware version 1.02 and earlier Fixed in — No fix listed CNA
  • LM-200 (for module EC25-J) VendoriND Co.,Ltd Affected firmware version 1.05e and earlier Fixed in — No fix listed CNA
  • L2X Assist VendoriND Co.,Ltd Affected firmware version 2.01 and earlier Fixed in — No fix listed CNA
  • L2X Assist-RS-A VendoriND Co.,Ltd Affected firmware version 1.11 and earlier Fixed in — No fix listed CNA
  • L2X Assist-RS-E VendoriND Co.,Ltd Affected firmware version 1.12 and earlier Fixed in — No fix listed CNA
  • F2L Assist-SS-A VendoriND Co.,Ltd Affected firmware version 1.03 and earlier Fixed in — No fix listed CNA
  • F2L Assist-SS-E VendoriND Co.,Ltd Affected firmware version 1.01 and earlier Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-53507
  2. 2026-10-03 Alias added: GHSA-5r7x-gv34-x2cp

References

Other 2

  • TI-2025-33453 OS command injection in iND Co.,Ltd HL330-DLS CVSS 4.0HIGH 8.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences