Vulnerability Spotlight: Command injection vulnerabilities in Robustel cellular router
Summary: Cisco Talos discovered four vulnerabilities in the Robustel R1510 industrial cellular router, including three command injection flaws (CVE-2022-32585, CVE-2022-33312 through CVE-2022-33314, and CVE-2022-33325 through CVE-2022-33329) and a data removal flaw (CVE-2022-28127) that lets an attacker delete arbitrary files. An attacker could trigger the command injection issues by sending a specific series of requests to the device, gaining the ability to execute remote code, and Talos confirmed version 3.3.0 of the router could be exploited.
Bottom line: This is a portable industrial router that shares 2G, 3G and 4G wireless internet access, so remote code execution on it puts an internet-facing edge device in an attacker's hands; Talos tested and confirmed version 3.3.0 is exploitable, and Snort rules 60007 through 60034 are the detection window you have.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-28127CVE-2022-32585CVE-2022-33312CVE-2022-33314CVE-2022-33325CVE-2022-33329
- Related
- Vulnerability Spotlight: Multiple issues in Robustel R1510 cellular router could lead to code execution, denial of service Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026