CVE-2022-26002

InHand Networks InRouter302 (V3.5.4) is affected by TALOS-2022-1476: a stack-based buffer overflow in the console factory functionality. The flaw occurs in the factory command path: if the first token is iwpriv, the second token is embedded into a fixed-size command buffer (128 bytes) via sprintf...