CVE-2022-26782: Improper Input Validation

Multiple improper input validation vulnerabilities exists in the libnvram.so nvramimport functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input...

InHand Networks InRouter Series 安全漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, U.S.A. An elevation of privilege vulnerability exists in the InHand Networks InRouter302 V3.5.4 release, which could be exploited by an attacker to cause an increase in privileges via a specially crafted HTTP request...

CVE-2022-26042: Improper Neutralization of Special Elements used in a Command

An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-26075: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the console infactorywlan functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

InHand Networks InRouter302 数据伪造问题漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, U.S.A. A firmware update vulnerability exists in the InHand Networks InRouter302 V3.5.37 release, which stems from a lack of valid validation in the iburn firmware checking feature. An attacker could exploit this...

CVE-2022-21238: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A cross-site scripting xss vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability...

InHand Networks InRouter302 安全漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, U.S.A. A command execution vulnerability exists in InHand Networks InRouter302 version V3.5.4, which can be exploited by attackers to cause arbitrary command execution...

CVE-2022-21182: Improper Access Control

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability...

PT-2022-18082 · Unknown +1 · Libnvram.So +2

Name of the Vulnerable Software and Affected Versions: InRouter302 version 3.5.4 Description: The issue is related to improper input validation vulnerabilities in the libnvram.so nvram import functionality and the httpd's user define print function. A specially-crafted file can lead to remote cod...

InHand Networks InRouter302 操作系统命令注入漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. InHand Networks InRouter302 version V3.5.37 contains an operating system command injection vulnerability that can be exploited by attackers to cause arbitrary command execution...

InHand Networks InRouter302操作系统命令注入漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. InHand Networks InRouter302 version V3.5.4 contains an operating system command injection vulnerability that can be exploited by attackers to cause arbitrary command execution...

CVE-2022-26781: Improper Input Validation

Multiple improper input validation vulnerabilities exists in the libnvram.so nvramimport functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input...

CVE-2022-26420: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the console infactoryport functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-24910: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in the httpd parsepingresult API functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2022-18083 · Unknown · Inrouter302

Name of the Vulnerable Software and Affected Versions: InRouter302 version 3.5.4 Description: The issue is related to improper input validation vulnerabilities in the libnvram.so nvram import functionality and the httpd's user define set item function. A specially-crafted file can lead to remote...

CVE-2022-26780: Improper Input Validation

Multiple improper input validation vulnerabilities exists in the libnvram.so nvramimport functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input...

InHand Networks InRouter Series 缓冲区错误漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. InHand Networks InRouter302 version V3.5.4 is vulnerable to an input validation error in the libnvram.so nvramimport function. userdefineprint function in the userdefinetimeoutnvram variable has an incorrect input...

CVE-2022-27172: Use of Hard-coded Password

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability...

InHand Networks InRouter302 缓冲区错误漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, U.S.A. The InHand Networks InRouter302 version V3.5.4 is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to cause remote code execution via a specially crafted network request...

CVE-2022-26085: Improper Neutralization of Special Elements used in a Command

An OS command injection vulnerability exists in the httpd wlscanASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...