PT-2023-1274 · Inhand Networks · Inrouter 615+1

Otorio + 1 · Published 2023-01-03 · Updated 2023-01-23 · CVE-2023-22599

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter 302 versions prior to IR302 V3.5.56 InHand Networks InRouter 615 versions prior to InRouter6XX-S-V2.3.0.r5542

Description The issue is related to the use of a one-way hash with a predictable salt, allowing an unauthorized user to easily calculate the hardcoded string used for encoding MQTT credentials. This could result in the affected devices being temporarily disconnected from the cloud platform, enabling the user to receive MQTT commands with potentially sensitive information. An attacker could exploit this by sending specially crafted HTTP/HTTPS requests using the MQTT protocol, potentially gaining unauthorized access to protected information.

Recommendations For InHand Networks InRouter 302 versions prior to IR302 V3.5.56, update to version IR302 V3.5.56 or later. For InHand Networks InRouter 615 versions prior to InRouter6XX-S-V2.3.0.r5542, update to version InRouter6XX-S-V2.3.0.r5542 or later. As a temporary workaround, consider restricting access to the MQTT protocol to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-760

Related Identifiers

BDU:2023-00541

CVE-2023-22599

Affected Products

Inrouter302

Inrouter 615

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-22599 · Security Note
• https://osv.dev/vulnerability/CVE-2023-22599 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00541 · Security Note
• https://inhandnetworks.com/products/inrouter615-s.html#link4 · Note
• https://inhandnetworks.com/products/inrouter300.html#link4 · Note
• https://cisa.gov/uscert/ics/advisories/icsa-23-012-03 · Note