CVE-2022-27272

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function…

published April 10, 2022

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

🚨 A simple crafted packet could let an attacker execute code on your InRouter 900! ⚡ Think of it like sending a delivery to a warehouse that doesn't check the contents — if the delivery person slips in something harmful, the warehouse might just unpack and use it without a second thought! This vulnerability could allow an attacker to take control of your router, potentially intercepting data, altering settings, or even launching attacks on connected devices. The consequences could be absolutely devastating if it lands in the wrong hands!

Put simply

Think of it like sending a delivery to a warehouse that doesn't check the contents — if the delivery person slips in something harmful, the warehouse might just unpack and use it without a second thought! This remote code execution (RCE) vulnerability in InHand Networks InRouter 900 allows attackers to execute arbitrary code by sending a specially crafted packet to the device's function sub_1791C.

What to do

This vulnerability could allow an attacker to take control of your router, potentially intercepting data, altering settings, or even launching attacks on connected devices. The consequences could be absolutely devastating if it lands in the wrong hands! To protect yourself, upgrade your InRouter 900 to version v1.0.0.r11700 or later. Additionally, keep your network monitoring in check and consider implementing packet filtering to catch any suspicious packets. 🛡️ You've got this! Stay proactive and secure your network, and you'll keep those pesky attackers at bay! ✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03471 · 89.0th percentile
Published
2022-04-10T20:23Z
EPSS history
Timeline
  • 10 APR 20:23Z
    InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerability via the function…
    cvelistv5