Lucene search
TalosCVELIST:CVE-2022-29481HistoryNov 09, 2022 - 5:35 p.m.
CVE-2022-29481
2022-11-0917:35:38
CWE-489
talos
www.cve.org
2
cve-2022-29481
inhand networks
inrouter302
debug code
vulnerability
security features
network requests
attacker
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
22.7%
A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to disabling security features. An attacker can send a sequence of requests to trigger this vulnerability.
CNA Affected
[
{
"vendor": "InHand Networks",
"product": "InRouter302",
"versions": [
{
"version": "V3.5.45",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2022-29481
2022-11-09 18:15:14
talos
talos
InHand Networks InRouter302 console nvram leftover debug code vulnerability
2022-10-27 00:00:00
prion
prion
Code injection
2022-11-09 18:15:00
cve
cve
CVE-2022-29481
2022-11-09 18:15:14
talosblog
talosblog
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
22.7%
Related for CVELIST:CVE-2022-29481