PT-2022-6203 · Inhand Networks · Inrouter302

Francesco Benvenuto · Published 2022-05-10 · Updated 2022-05-23 · CVE-2022-26085

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter302 version 3.5.4

Description An OS command injection issue exists in the httpd wlscan ASP functionality, allowing a specially-crafted HTTP request to lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this issue. The vulnerability can be exploited by a remote attacker to execute arbitrary commands.

Recommendations For InHand Networks InRouter302 version 3.5.4, consider disabling the wlscan ASP functionality in the httpd service until a patch is available to prevent exploitation. Restrict access to the httpd service to minimize the risk of arbitrary command execution. Avoid using the vulnerable httpd wlscan ASP functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2023-00471

CVE-2022-26085

Affected Products

Inrouter302

References · 7

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1473 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-26085 · Security Note
• https://inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00471 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26085 · Vendor Advisory
• https://t.me/cibsecurity/42518 · Telegram Post
• https://t.me/cvenotify/30111 · Telegram Post