CVE-2022-25932

🗓️ 09 Nov 2022 17:35:34Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 64 Views

The firmware of InHand Networks InRouter302 V3.5.45 introduces incomplete fixes for privilege escalation and information disclosure vulnerabilities

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-25932	28 Oct 202211:12	–	circl
CNNVD	InHand Networks InRouter302 访问控制错误漏洞	27 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-25932	9 Nov 202217:35	–	cvelist
EUVD	EUVD-2022-30510	3 Oct 202520:07	–	euvd
NVD	CVE-2022-25932	9 Nov 202218:15	–	nvd
Prion	Information disclosure	9 Nov 202218:15	–	prion
Positive Technologies	PT-2022-17610 · Inhand Networks · Inrouter302	28 Oct 202200:00	–	ptsecurity
Talos	InHand Networks InRouter302 Incorrect fixes privilege escalation vulnerability	27 Oct 202200:00	–	talos
Talos Blog	Vulnerability Spotlight: Vulnerabilities in InHand router could give attackers access to console, delete files	27 Oct 202215:04	–	talosblog
Talos Blog	The many vulnerabilities Talos discovered in SOHO and industrial wireless routers post-VPNFilter	2 Aug 202312:00	–	talosblog

NVD

Vulners

Node

inhandnetworks inrouter302_firmwareRange<3.5.56

AND

inhandnetworks inrouter302Match-

[
  {
    "vendor": "InHand Networks",
    "product": "InRouter302",
    "versions": [
      {
        "version": "V3.5.45",
        "status": "affected"
      }
    ]
  }
]

Source	Link
inhandnetworks	www.inhandnetworks.com/upload/attachment/202210/25/InHand-PSA-2022-02.pdf
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2022-1523