Vulnerability Spotlight: Vulnerabilities in InHand router could give attackers access to console, delete files
Summary: Cisco Talos discovered several vulnerabilities in InHand Networks' InRouter302 industrial LTE router that could let an attacker reach the console and change settings, including security protocols. TALOS-2022-1522 (CVE-2022-29888) can be triggered by a specially crafted HTTP request to delete arbitrary files, and TALOS-2022-1523 (CVE-2022-25932) is an updated finding because the earlier patch for TALOS-2022-1472 and TALOS-2022-1474 was not effective.
Why it matters: The fix for these flaws already failed once, and the router's firmware still carries leftover code in its debug feature - so an industrial LTE device sitting on your network may need more than a patch-and-move-on response.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-25932CVE-2022-29888
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026