Ir302 Firmware@* Security Vulnerabilities and Issues — Ir302 Firmware@* CVE List

Lucene search

InhandnetworksIr302 Firmware*

6 matches found

CVE•added 2022/05/12 5:15 p.m.•64 views

CVE-2022-24910

A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

8.2CVSS7.3AI score0.03127EPSS

CVE•added 2022/05/12 5:15 p.m.•63 views

CVE-2022-26780

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input vali...

9.9CVSS9AI score0.00906EPSS

CVE•added 2022/05/12 5:15 p.m.•62 views

CVE-2022-26782

9.9CVSS8.9AI score0.01076EPSS

CVE•added 2022/05/12 5:15 p.m.•60 views

CVE-2022-26781

9.9CVSS9AI score0.00876EPSS

CVE•added 2022/05/12 5:15 p.m.•55 views

CVE-2022-27172

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability.

8.8CVSS8.6AI score0.00374EPSS

CVE•added 2022/05/12 5:15 p.m.•43 views

CVE-2022-25172

An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4. The session cookie misses the HttpOnly flag, making it accessible via JavaScript and thus allowing an attacker, able to perform an XSS attack, to steal the session...

7.5CVSS6AI score0.00312EPSS