InHand Networks

Records64All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

InHand Networks records in CISA KEV

No InHand Networks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ir302 Firmware 25 records HIGH Ir615 Firmware 17 records MEDIUM Inrouter 900 Firmware 12 records MEDIUM Inrouter302 Firmware 9 records HIGH Inrouter615-s Firmware 5 records MEDIUM Ir912l-fq58 Firmware 5 records MEDIUM Ir915l-fq39-s Firmware 5 records MEDIUM Ir305 Firmware 4 records MEDIUM

Records

64 records

TI-2022-10031 CVE-2022-26782 · GHSA-2r2r-3m5m-6f5f

Improper input validation in InHand Networks InRouter302

HIGH 73

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0329 Published 2022-05-12 No fix listed CWE-20

TI-2022-10030 CVE-2022-26781 · GHSA-jc3h-qcpc-wr94

Improper input validation in InHand Networks InRouter302

HIGH 73

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02944 Published 2022-05-12 No fix listed CWE-20

TI-2022-10029 CVE-2022-26780 · GHSA-26jm-8hgr-3m9h

Improper input validation in InHand Networks InRouter302

HIGH 73

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0329 Published 2022-05-12 No fix listed CWE-20

TI-2022-09858 CVE-2022-26518 · GHSA-f4cx-vfr9-7qhc

OS command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04852 Published 2022-05-12 No fix listed CWE-78

TI-2022-09770 CVE-2022-26420 · GHSA-95p8-m8r9-45fg

OS command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05924 Published 2022-05-12 No fix listed CWE-78

TI-2022-09551 CVE-2022-26085 · GHSA-qcjq-ff52-gpfq

Command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12675 Published 2022-05-12 No fix listed CWE-77

TI-2022-09542 CVE-2022-26075 · GHSA-39q8-x888-fj53

OS command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05924 Published 2022-05-12 No fix listed CWE-78

TI-2022-09522 CVE-2022-26042 · GHSA-7pwj-wph6-rxw9

Command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08614 Published 2022-05-12 No fix listed CWE-77

TI-2022-09503 CVE-2022-25995 · GHSA-fmwc-x5q7-8pr9

A command execution vulnerability exists in the console inhand functionality of InHand…

HIGH 73

A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02857 Published 2022-05-12 No fix listed CWE-489

TI-2022-12699 CVE-2022-30543 · GHSA-2qqv-j52q-3xhq

A leftover debug code vulnerability exists in the console infct functionality of InHand…

HIGH 71

A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01106 Published 2022-11-09 No fix listed CWE-489

TI-2022-10297 CVE-2022-27172 · GHSA-rvr3-vjcx-2799

Hard-coded credentials in InHand Networks InRouter302

HIGH 71

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01085 Published 2022-05-12 No fix listed CWE-259

TI-2022-05581 CVE-2022-21182 · GHSA-h6h4-hwj4-6rv9

Improper access control in InHand Networks InRouter302

HIGH 71

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01971 Published 2022-05-12 No fix listed CWE-284

TI-2022-06181 CVE-2022-21809 · GHSA-399c-25pm-72mj

Unrestricted file upload in InHand Networks InRouter302

HIGH 70

A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0182 Published 2022-05-12 No fix listed CWE-377

TI-2022-12243 CVE-2022-29888 · GHSA-jvhv-c9pj-767g

A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi…

HIGH 68

A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01624 Published 2022-11-09 No fix listed CWE-489

TI-2022-09508 CVE-2022-26007 · GHSA-qqcg-f3m6-q34f

Command injection in InHand Networks InRouter302

HIGH 67

An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.05446 Published 2022-05-12 No fix listed CWE-77

TI-2022-09506 CVE-2022-26002 · GHSA-wrch-x9jr-vrp8

Stack-based buffer overflow in InHand Networks InRouter302

HIGH 67

A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03412 Published 2022-05-12 No fix listed CWE-121

TI-2022-08885 CVE-2022-25172 · GHSA-pqgp-549c-xhq5

Incorrect permission assignment in InHand Networks InRouter302

HIGH 66

An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01035 Published 2022-05-12 No fix listed CWE-1004

TI-2022-08719 CVE-2022-24910 · GHSA-g8jg-j3w6-vgf8

Buffer overflow in InHand Networks InRouter302

HIGH 65

A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.01341 Published 2022-05-12 No fix listed CWE-120

TI-2022-09851 CVE-2022-26510 · GHSA-567v-8x5m-wxxw

Improper signature verification in InHand Networks InRouter302

MEDIUM 64

A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01307 Published 2022-05-12 No fix listed CWE-347

TI-2022-11943 CVE-2022-29481 · GHSA-g8qv-j323-hj3f

A leftover debug code vulnerability exists in the console nvram functionality of InHand…

MEDIUM 62

A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00894 Published 2022-11-09 No fix listed CWE-489

TI-2022-09515 CVE-2022-26023 · GHSA-9v4w-g4mw-792q

A leftover debug code vulnerability exists in the console verify functionality of InHand…

MEDIUM 62

A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00902 Published 2022-11-09 No fix listed CWE-489

TI-2022-09513 CVE-2022-26020 · GHSA-v7wj-223x-4h9h

Hard-coded credentials in InHand Networks InRouter302

MEDIUM 62

An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00681 Published 2022-05-12 No fix listed CWE-321

TI-2022-05629 CVE-2022-21238 · GHSA-hmwh-6pgm-776g

Cross-site scripting in InHand Networks InRouter302

MEDIUM 60

A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01537 Published 2022-05-12 No fix listed CWE-80

TI-2026-28194 CVE-2026-38717 · GHSA-qfcf-8pf2-288v

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions)…

MEDIUM 53

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the file upload function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02307 Published 2026-06-18 No fix listed CWE-77

TI-2026-28193 CVE-2026-38716 · GHSA-x626-h7w8-hpmr

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions)…

MEDIUM 53

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python application export function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02307 Published 2026-06-18 No fix listed CWE-77

Open these records in search →