A critical command injection vulnerability affects the Admin Access feature of multiple InHand Networks IR series devices including IR302, IR305, IR315, and IR615 models. The vulnerability exists in firmware versions V3.5.108 for IR302 and V1.0.118 for IR305, IR315, and IR615, as well as earlier versions. Attackers can exploit this flaw to gain ROOT privileges on remote target devices. This represents a high-severity security issue that could allow complete system compromise. The vulnerability affects industrial router devices commonly used in network infrastructure.