InHand IR-series Routers CVE-2026-38707
CRITICALCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionNVD
A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target devices.
AnalysisAI
Remote code execution as root in InHand Networks industrial cellular routers (IR302, IR305, IR315, IR615) allows unauthenticated network attackers to inject operating system commands through the IPSec VPN feature. The CVSS 9.8 score reflects network-reachable, low-complexity, unauthenticated exploitation with full confidentiality, integrity, and availability impact. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: inventory all InHand Networks routers (IR302, IR305, IR315, IR615 models) in production, isolate affected units from untrusted networks, and restrict IPSec VPN access to trusted IP address ranges only. Within 7 days: implement network segmentation to limit lateral movement from compromised routers and deploy network-based monitoring on all IPSec traffic to these devices. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today