inhandnetworks Vulnerability Advisory Catalog

Total 64 security vulnerabilities recorded for inhandnetworks software and firmware.

← Back to All Vendors
CVE-2022-27270 CRITICAL
Component: inrouter_900_firmware

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the c...

📅 2022-04-10
CVSS 9.8 Dossier →
CVE-2022-27269 CRITICAL
Component: inrouter_900_firmware

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the c...

📅 2022-04-10
CVSS 9.8 Dossier →
CVE-2022-27268 CRITICAL
Component: inrouter_900_firmware

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the c...

📅 2022-04-10
CVSS 9.8 Dossier →
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requ...

📅 2021-10-19
CVSS 8.0 Dossier →
CVE-2021-38484 CRITICAL
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of maliciou...

📅 2021-10-19
CVSS 9.1 Dossier →
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scripting, w...

📅 2021-10-19
CVSS 8.7 Dossier →
CVE-2021-38480 CRITICAL
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submit...

📅 2021-10-19
CVSS 9.6 Dossier →
CVE-2021-38478 CRITICAL
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the ...

📅 2021-10-19
CVSS 9.1 Dossier →
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a usernam...

📅 2021-10-19
CVSS 6.5 Dossier →
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have has no account lockout policy configured for the login page of the product. T...

📅 2021-10-19
CVSS 6.3 Dossier →
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 management portal does not contain an X-FRAME-OPTIONS header, which an attacker ma...

📅 2021-10-19
CVSS 4.7 Dossier →
CVE-2021-38470 CRITICAL
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device...

📅 2021-10-19
CVSS 9.1 Dossier →
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to stored cross-scripting, which may allow an attacker to hijack se...

📅 2021-10-19
CVSS 8.7 Dossier →
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not perform sufficient input validation on client requests from the help page. ...

📅 2021-10-19
CVSS 8.8 Dossier →
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the ...

📅 2021-10-19
CVSS 6.4 Dossier →
CVE-2021-38462 CRITICAL
Component: ir615_firmware

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attacker with obt...

📅 2021-10-19
CVSS 9.8 Dossier →
Page 3 of 3 (64 Total Records)