Read the docs

InHand Networks

Records64All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical28CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

InHand Networks records in CISA KEV

No InHand Networks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ir302 Firmware 25 records HIGH Ir615 Firmware 17 records MEDIUM Inrouter 900 Firmware 12 records MEDIUM Inrouter302 Firmware 9 records HIGH Inrouter615-s Firmware 5 records MEDIUM Ir912l-fq58 Firmware 5 records MEDIUM Ir915l-fq39-s Firmware 5 records MEDIUM Ir305 Firmware 4 records MEDIUM

Records

9 records in Inrouter302 Firmware · all components

TI-2022-05581 CVE-2022-21182 · GHSA-h6h4-hwj4-6rv9

Improper access control in InHand Networks InRouter302

Priority HIGH 71

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01971 Published 2022-05-12 No fix listed CWE-284
TI-2022-06181 CVE-2022-21809 · GHSA-399c-25pm-72mj

Unrestricted file upload in InHand Networks InRouter302

Priority HIGH 70

A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0182 Published 2022-05-12 No fix listed CWE-377
TI-2022-05629 CVE-2022-21238 · GHSA-hmwh-6pgm-776g

Cross-site scripting in InHand Networks InRouter302

Priority MEDIUM 60

A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01537 Published 2022-05-12 No fix listed CWE-80
TI-2023-08791 CVE-2023-22601 · GHSA-8rgq-7c98-wxpm

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to…

Priority MEDIUM 50

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00578 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-330
TI-2023-08790 CVE-2023-22600 · GHSA-p6gg-9438-r6rj

Improper access control in InHand Networks InRouter 302

Priority MEDIUM 49

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00506 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-284
TI-2022-09477 CVE-2022-25932 · GHSA-77rh-r8h5-mfmc

Improper access control in InHand Networks InRouter302

Priority MEDIUM 43

The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00717 Published 2022-11-09 No fix listed CWE-284
TI-2023-08789 CVE-2023-22599 · GHSA-3q43-m4hc-qh5p

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to…

Priority LOW 39

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0033 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-760
TI-2023-08788 CVE-2023-22598 · GHSA-x3rw-7xfq-v6g9

OS command injection in InHand Networks InRouter 302

Priority LOW 37

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization of Special Elements used in an OS Command…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01706 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-78
TI-2023-08787 CVE-2023-22597 · GHSA-9h47-6hm4-j5r2

Cleartext transmission of sensitive information in InHand Networks InRouter 302

Priority LOW 29

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00528 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-319
Open these records in search →