CVE-2023-22599 Hardcoded credentials in InRouter 302
An attacker can spoof requests to obtain hardcoded MQTT credentials, leading to device disconnection and exposure of sensitive command data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-22599?
CVE-2023-22599 is a high-severity vulnerability in InHand Networks InRouter 302, published on 12 Jan 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt. They
send MQTT credentials in response to HTTP/HTTPS requests from the cloud platform. These credentials are encoded using a hardcoded string into an MD5 hash. This string could be easily calculated by an unauthorized user who spoofed sending an HTTP/HTTPS request to the devices. This could result in the affected devices being temporarily disconnected from the cloud platform and allow the user to receive MQTT commands with potentially sensitive information.
Weakness: CWE-760
Which versions are affected by CVE-2023-22599?
It affects 2 products.
Products include Inhandnetworks Inrouter302 Firmware, Inhandnetworks Inrouter615-S Firmware.
How do I fix CVE-2023-22599?
No fix has been published for CVE-2023-22599 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-22599 being exploited?
There is no known exploitation of CVE-2023-22599 in the wild and no public exploit code.
Other vulnerabilities in InHand Networks InRouter 302
Sources
Also known as GHSA-3q43-m4hc-qh5p.