Vulnerability Spotlight: How an attacker could chain several vulnerabilities in an industrial wireless router to gain root access
Summary: Cisco Talos discovered several vulnerabilities in InHand Networks' InRouter302, an industrial LTE router, that let an attacker escalate from a non-privileged user to a privileged one and, in multiple paths, reach unconstrained root access. Talos describes a chain starting with a phishing link that exfiltrates a session cookie, and notes that during disclosure a new firmware, version 3.5.37, introduced a hardcoded password for a new privileged console view plus three command injection flaws (TALOS-2022-1496, CVE-2022-27172 among them).
Key Takeaway: A single click on an attacker-controlled link can take an attacker to root on a router that sits in front of an industrial network, and from there they can inject, drop or inspect packets, poison DNS, or pivot further in. The fix requires updating InRouter302 versions 3.5.4 and 3.5.37 to 3.5.45, and several of the flaws are unique to 3.5.37.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026