CVE-2022-27279: Path Traversal
First published: Sun Apr 10 2022(Updated: )
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub_177E0.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Inhandnetworks Inrouter 900 Firmware | <1.0.0.r11700 | |
| Inhandnetworks Inrouter 900 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://drive.google.com/drive/folders/1MPtl6pGa7GMIT1-jg69YUGSQdVTfbnay?usp=sharing
- https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities(Arbitrary%20File%20Deletion%20and%20Read).pdf
- https://github.com/wu610777031/IoT_Hunter/blob/main/Inhand%20InRouter%20900%20Industrial%204G%20Router%20%20Vulnerabilities%28Arbitrary%20File%20Deletion%20and%20Read%29.pdf
Frequently Asked Questions
What is the severity of CVE-2022-27279?
The severity of CVE-2022-27279 is high with a CVSS score of 7.5.
What is the vulnerability in InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700?
The vulnerability is an arbitrary file read via the function sub_177E0.
How can I check if my InHand Networks InRouter 900 is affected by CVE-2022-27279?
Ensure your device is running firmware version before v1.0.0.r11700 to determine if it is affected by CVE-2022-27279.
Is InHand Networks InRouter 900 firmware version 1.0.0.r11700 vulnerable to CVE-2022-27279?
Yes, InHand Networks InRouter 900 firmware version 1.0.0.r11700 is vulnerable to CVE-2022-27279.
How can I mitigate the arbitrary file read vulnerability in InHand Networks InRouter 900 Industrial 4G Router?
Update the firmware of InHand Networks InRouter 900 to version 1.0.0.r11700 or higher to mitigate the arbitrary file read vulnerability.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/author
- agent/tags
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- vendor/inhandnetworks
- canonical/inhandnetworks inrouter 900 firmware
- canonical/inhandnetworks inrouter 900