iND Co., Ltd. Products Insecure Storage of Sensitive Information Vulnerability

A vulnerability allowing insecure storage of sensitive information has been identified in multiple products by iND Co., Ltd. This issue could lead to the unintentional disclosure of configuration information, such as admin passwords. The vulnerability affects several different products and ranges, including various models of mobile routers and related devices, all running specific firmware versions or earlier.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive configuration information, including administrative passwords, potentially allowing for further exploitation of the device.

Remediation

Users are advised to update the firmware to the latest version. For HL330-DLS, which is no longer supported, it is possible to update using the firmware for HL320-DLS, as they share the same firmware. Instructions for updating other affected products are also available on the iND Co., Ltd. website.