CVE-2022-27172

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-26002

A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of malicious packets to trigger this vulnerability...

Stack overflow

A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of malicious packets to trigger this vulnerability...

PT-2022-17631

Name of the Vulnerable Software and Affected Versions InRouter302 version 3.5.4 Description A command injection issue exists in the console factory functionality, allowing a specially-crafted network request to lead to command execution. An attacker can exploit this by sending a sequence of...

CVE-2022-26002: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of malicious packets to trigger this vulnerability...

CVE-2022-26007: Improper Neutralization of Special Elements used in a Command

An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2022-6370

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter302 version 3.5.4 Description A stack-based buffer overflow vulnerability exists in the console factory functionality. This issue can be triggered by a specially-crafted network request, leading to remote code execution...