Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
InhandnetworksIr302 Firmware

21 matches found

CVE
CVE•added 2022/05/12 5:15 p.m.•64 views

CVE-2022-24910

A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

8.2CVSS7.3AI score0.03127EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•63 views

CVE-2022-26007

An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability.

9.1CVSS7.3AI score0.03543EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•63 views

CVE-2022-26020

An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.

6.5CVSS6.3AI score0.00263EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•63 views

CVE-2022-26780

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input vali...

9.9CVSS9AI score0.00906EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•62 views

CVE-2022-26782

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input vali...

9.9CVSS8.9AI score0.01076EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•61 views

CVE-2022-25995

A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

9.9CVSS8.8AI score0.01888EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•60 views

CVE-2022-26002

A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of malicious packets to trigger this vulnerability.

9.1CVSS7.6AI score0.07733EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•60 views

CVE-2022-26781

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input vali...

9.9CVSS9AI score0.00876EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•59 views

CVE-2022-26042

An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

9.9CVSS8.9AI score0.02629EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•58 views

CVE-2022-26420

An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

9.9CVSS9AI score0.09335EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•57 views

CVE-2022-26075

An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

9.9CVSS9AI score0.09335EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•55 views

CVE-2022-27172

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability.

8.8CVSS8.6AI score0.00374EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•53 views

CVE-2022-26085

An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

9.9CVSS8.8AI score0.02675EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•51 views

CVE-2022-26510

A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability.

9.9CVSS6.6AI score0.00487EPSS
CVE
CVE•added 2022/11/09 6:15 p.m.•51 views

CVE-2022-30543

A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to execution of privileged operations. An attacker can send a sequence of requests to trigger this vulnerability.

8.8CVSS8.8AI score0.00967EPSS
CVE
CVE•added 2022/11/09 6:15 p.m.•45 views

CVE-2022-26023

A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to disabling security features. An attacker can send a sequence of requests to trigger this vulnerability.

6.5CVSS7.1AI score0.00133EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•44 views

CVE-2022-26518

An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

9.9CVSS9AI score0.07104EPSS
CVE
CVE•added 2022/11/09 6:15 p.m.•44 views

CVE-2022-29888

A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted HTTP request can lead to arbitrary file deletion. An attacker can send an HTTP request to trigger this vulnerability.

8.1CVSS8.5AI score0.00259EPSS
CVE
CVE•added 2022/05/12 5:15 p.m.•43 views

CVE-2022-25172

An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4. The session cookie misses the HttpOnly flag, making it accessible via JavaScript and thus allowing an attacker, able to perform an XSS attack, to steal the session...

7.5CVSS6AI score0.00312EPSS
CVE
CVE•added 2022/11/09 6:15 p.m.•42 views

CVE-2022-28689

A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

8.8CVSS9.1AI score0.00345EPSS
CVE
CVE•added 2022/11/09 6:15 p.m.•42 views

CVE-2022-29481

A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to disabling security features. An attacker can send a sequence of requests to trigger this vulnerability.

6.5CVSS7.1AI score0.00113EPSS