InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the web_exec parameter at /apply.cgi.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/skyvast404/IoT_Hunter
- https://github.com/wu610777031/IoT_Hunter