CVE-2022-26518

An OS command injection vulnerability exists in the console infactorynet functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-26420

An OS command injection vulnerability exists in the console infactoryport functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2022-3464

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter302 version 3.5.37 Description The issue is related to the use of hardcoded credentials in the InHand Networks InRouter302, specifically in the console infactory functionality. This can be exploited by a remote attacker...

PT-2022-17914

Name of the Vulnerable Software and Affected Versions InHand Networks InRouter302 version 3.5.37 Description An OS command injection issue exists in the console infactory net functionality. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a...

CVE-2022-27172: Use of Hard-coded Password

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability...