Read the docs

InHand Networks

Records64All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical28CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

InHand Networks records in CISA KEV

No InHand Networks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ir302 Firmware 25 records HIGH Ir615 Firmware 17 records MEDIUM Inrouter 900 Firmware 12 records MEDIUM Inrouter302 Firmware 9 records HIGH Inrouter615-s Firmware 5 records MEDIUM Ir912l-fq58 Firmware 5 records MEDIUM Ir915l-fq39-s Firmware 5 records MEDIUM Ir305 Firmware 4 records MEDIUM

Records

5 records in Inrouter615-s Firmware · all components

TI-2023-08791 CVE-2023-22601 · GHSA-8rgq-7c98-wxpm

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to…

Priority MEDIUM 50

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00578 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-330
TI-2023-08790 CVE-2023-22600 · GHSA-p6gg-9438-r6rj

Improper access control in InHand Networks InRouter 302

Priority MEDIUM 49

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00506 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-284
TI-2023-08789 CVE-2023-22599 · GHSA-3q43-m4hc-qh5p

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to…

Priority LOW 39

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0033 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-760
TI-2023-08788 CVE-2023-22598 · GHSA-x3rw-7xfq-v6g9

OS command injection in InHand Networks InRouter 302

Priority LOW 37

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization of Special Elements used in an OS Command…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01706 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-78
TI-2023-08787 CVE-2023-22597 · GHSA-9h47-6hm4-j5r2

Cleartext transmission of sensitive information in InHand Networks InRouter 302

Priority LOW 29

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00528 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-319
Open these records in search →