Priority MEDIUM 49
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component config_ovpn.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03833 · Published 2022-04-10 · No fix listed CWE-78
Priority MEDIUM 49
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component get_cgi_from_memory.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03833 · Published 2022-04-10 · No fix listed CWE-78
Priority MEDIUM 48
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component python-lib.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03471 · Published 2022-04-10 · No fix listed CWE-78
Priority MEDIUM 48
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the component ipsec_secrets.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03471 · Published 2022-04-10 · No fix listed CWE-78
Priority MEDIUM 48
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12168.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03471 · Published 2022-04-10 · No fix listed CWE-78
Priority MEDIUM 48
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_1791C.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03471 · Published 2022-04-10 · No fix listed CWE-78
Priority MEDIUM 48
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_122D0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03471 · Published 2022-04-10 · No fix listed CWE-78
Priority MEDIUM 48
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_12028.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03471 · Published 2022-04-10 · No fix listed CWE-78
Priority MEDIUM 42
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub_17C08.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01373 · Published 2022-04-10 · No fix listed CWE-22
Priority MEDIUM 48
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function sub_10F2C.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03567 · Published 2022-04-10 · No fix listed CWE-78
Priority LOW 36
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub_177E0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01508 · Published 2022-04-10 · No fix listed CWE-22
Priority LOW 25
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the web_exec parameter at /apply.cgi.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00575 · Published 2022-04-10 · No fix listed CWE-79