InHand industrial routers have recently been found to have several vulnerabilities that can potentially let attackers take control of systems connected to the industrial networks. According to a report by security firm CyberX, the vulnerabilities can be exploited both remotely and locally, threatening OT networks that rely on such routers.
The vulnerabilities, which are mainly related to authentication, authorization and encryption, can be exploited to execute arbitrary code, information disclosure and denial of service on the target system. The base OS of the router is VxWorks 6.9.4, which is an operating system for embedded systems.
The InHand industrial router is mainly used in manufacturing, oil and gas industry, public transport and pharmaceuticals etc. It has more than 30,000 installations in over 30 countries.
According to the researchers, these vulnerabilities can allow attackers to gain access to sensitive OT networks, allowing them to monitor, disrupt and damage the affected system. They further noted that such attacks can lead to a disruption in production, resulting in loss of revenue and even illegal access to intellectual property.
To mitigate such attacks, it is highly recommended that users of InHand industrial routers upgrade to the latest version of the device and also ensure adherence to air-gapped security policies. It is also important to conduct regular cyber security assessments to prevent and respond to any threats in time.
This Cyber News was published on www.securityweek.com. Publication date: Sun, 22 Jan 2023 10:48:00 +0000