Vulnerabilidad en InHand Networks InRouter 302 (CVE-2023-22599)
Gravedad CVSS v3.1:
CRÍTICA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
12/01/2023
Última modificación:
07/11/2023
Descripción
*** Pendiente de traducción *** <br />
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt. They <br />
<br />
send MQTT credentials in response to HTTP/HTTPS requests from the cloud platform. These credentials are encoded using a hardcoded string into an MD5 hash. This string could be easily calculated by an unauthorized user who spoofed sending an HTTP/HTTPS request to the devices. This could result in the affected devices being temporarily disconnected from the cloud platform and allow the user to receive MQTT commands with potentially sensitive information. <br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Impacto
Puntuación base 3.x
9.10
Gravedad 3.x
CRÍTICA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:inhandnetworks:inrouter302_firmware:*:*:*:*:*:*:*:* | 3.5.56 (excluyendo) | |
| cpe:2.3:h:inhandnetworks:inrouter302:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:inhandnetworks:inrouter615-s_firmware:*:*:*:*:*:*:*:* | 2.3.0.r5542 (excluyendo) | |
| cpe:2.3:h:inhandnetworks:inrouter615-s:-:*:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página