https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:36:49 +0000 https://cve.radiocsirt.org/vuln/cve-2023-22598 <p><strong>Affected:</strong> InHand Networks InRouter 302, InHand Networks InRouter 615</p> <p>InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;).</p> <p>An unauthorized user with privileged access to the local web interface or the cloud account managing the affected devices could push a specially crafted configuration update file to gain root access. This could lead to remote code execution with root privileges.</p> <p><strong>Affected:</strong> InHand Networks InRouter 302, InHand Networks InRouter 615</p> <p>InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;).</p> <p>An unauthorized user with privileged access to the local web interface or the cloud account managing the affected devices could push a specially crafted configuration update file to gain root access. This could lead to remote code execution with root privileges.</p> https://cve.radiocsirt.org/vuln/cve-2023-22598