iND Co., Ltd. Products OS Command Injection Vulnerability

A command injection vulnerability allowing arbitrary operating system commands to be executed has been identified in multiple products by iND Co., Ltd. This vulnerability could also lead to the unauthorized access of sensitive information. Affected products include various models of mobile routers, with specific firmware versions listed in the product status section.

Impact

Exploitation of this vulnerability allows for arbitrary OS command execution and access to sensitive information.

Remediation

Users are advised to update the firmware to the latest version. For HL330-DLS, which is no longer supported, it is possible to update using the firmware for HL320-DLS, as they share the same firmware. Instructions for updating other affected products are also available on the iND Co., Ltd. website.