CVE-2022-26780

Multiple improper input validation vulnerabilities exists in the libnvram.so nvramimport functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input...

CVE-2022-26780

InHand Networks InRouter302 (V3.5.4) contains multiple input-validation flaws in the web server and libnvram (nvram_import) that can be triggered via specially crafted files or by manipulating the user_define_timeout nvram value. Citations describe stack-based buffer overflows in httpd functions ...