CVE-2022-21809

🗓️ 12 May 2022 17:01:31Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 72 Views

A file write vulnerability in InHand Networks InRouter302 V3.5.4 allows arbitrary file upload via httpd upload.cgi

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-21809	12 May 202220:42	–	circl
CNNVD	InHand Networks InRouter302 代码问题漏洞	12 May 202200:00	–	cnnvd
CNVD	InHand Networks InRouter 302 File Write Vulnerability	16 May 202200:00	–	cnvd
Cvelist	CVE-2022-21809	12 May 202217:01	–	cvelist
EUVD	EUVD-2022-26970	3 Oct 202520:07	–	euvd
NVD	CVE-2022-21809	12 May 202217:15	–	nvd
OSV	CVE-2022-21809	12 May 202217:15	–	osv
Prion	Arbitrary file deletion	12 May 202217:15	–	prion
Talos	InHand Networks InRouter302 httpd upload.cgi file write vulnerability	10 May 202200:00	–	talos
Talos Blog	The many vulnerabilities Talos discovered in SOHO and industrial wireless routers post-VPNFilter	2 Aug 202312:00	–	talosblog

NVD

Vulners

Node

inhandnetworks inrouter302_firmwareRange≤3.5.37

AND

inhandnetworks inrouter302Match-

[
  {
    "product": "InRouter302",
    "vendor": "InHand Networks",
    "versions": [
      {
        "status": "affected",
        "version": "V3.5.4"
      }
    ]
  }
]

Source	Link
inhandnetworks	www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2022-1468