Lucene search

PRIOn knowledge basePRION:CVE-2022-28689

HistoryNov 09, 2022 - 6:15 p.m.

Code injection

2022-11-0918:15:00

PRIOn knowledge base

www.prio-n.com

debug code

vulnerability

console support

inhand networks

inrouter302

arbitrary command execution

network request

attacker

sequence of requests

code injection

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

CPENameOperatorVersion
ir302_firmwareeq3.5.45

CPE	Name	Operator	Version
	ir302_firmware	eq	3.5.45

References

inhandnetworks.com/upload/attachment/202210/25/InHand-PSA-2022-02.pdf

talosintelligence.com/vulnerability_reports/TALOS-2022-1521