InHand Networks InRouter302 Input Validation Error Vulnerability (CNVD-2022-59187)

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. InHand Networks InRouter302 version V3.5.4 is vulnerable to an input validation error in the libnvram.so nvramimport function. userdefineprint function in the userdefinetimeoutnvram variable has an incorrect input...

CVE-2022-26781

Summary: CVE-2022-26781 affects InHand Networks InRouter302 v3.5.4. Multiple input-validation flaws in the libnvram.so nvram_import function and in httpd components (user_define_print, user_define_init, user_define_set_item) allow crafted input to trigger remote code execution. The root cause is ...

CVE-2022-26781

Multiple improper input validation vulnerabilities exists in the libnvram.so nvramimport functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input...