InHand Networks

Records64All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

InHand Networks records in CISA KEV

No InHand Networks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ir302 Firmware 25 records HIGH Ir615 Firmware 17 records MEDIUM Inrouter 900 Firmware 12 records MEDIUM Inrouter302 Firmware 9 records HIGH Inrouter615-s Firmware 5 records MEDIUM Ir912l-fq58 Firmware 5 records MEDIUM Ir915l-fq39-s Firmware 5 records MEDIUM Ir305 Firmware 4 records MEDIUM

Records

25 records in Ir302 Firmware · all components

TI-2022-10031 CVE-2022-26782 · GHSA-2r2r-3m5m-6f5f

Improper input validation in InHand Networks InRouter302

HIGH 73

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0329 Published 2022-05-12 No fix listed CWE-20

TI-2022-10030 CVE-2022-26781 · GHSA-jc3h-qcpc-wr94

Improper input validation in InHand Networks InRouter302

HIGH 73

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02944 Published 2022-05-12 No fix listed CWE-20

TI-2022-10029 CVE-2022-26780 · GHSA-26jm-8hgr-3m9h

Improper input validation in InHand Networks InRouter302

HIGH 73

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0329 Published 2022-05-12 No fix listed CWE-20

TI-2022-09858 CVE-2022-26518 · GHSA-f4cx-vfr9-7qhc

OS command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04852 Published 2022-05-12 No fix listed CWE-78

TI-2022-09770 CVE-2022-26420 · GHSA-95p8-m8r9-45fg

OS command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05924 Published 2022-05-12 No fix listed CWE-78

TI-2022-09551 CVE-2022-26085 · GHSA-qcjq-ff52-gpfq

Command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12675 Published 2022-05-12 No fix listed CWE-77

TI-2022-09542 CVE-2022-26075 · GHSA-39q8-x888-fj53

OS command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05924 Published 2022-05-12 No fix listed CWE-78

TI-2022-09522 CVE-2022-26042 · GHSA-7pwj-wph6-rxw9

Command injection in InHand Networks InRouter302

HIGH 73

An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08614 Published 2022-05-12 No fix listed CWE-77

TI-2022-09503 CVE-2022-25995 · GHSA-fmwc-x5q7-8pr9

A command execution vulnerability exists in the console inhand functionality of InHand…

HIGH 73

A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02857 Published 2022-05-12 No fix listed CWE-489

TI-2022-12699 CVE-2022-30543 · GHSA-2qqv-j52q-3xhq

A leftover debug code vulnerability exists in the console infct functionality of InHand…

HIGH 71

A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01106 Published 2022-11-09 No fix listed CWE-489

TI-2022-10297 CVE-2022-27172 · GHSA-rvr3-vjcx-2799

Hard-coded credentials in InHand Networks InRouter302

HIGH 71

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01085 Published 2022-05-12 No fix listed CWE-259

TI-2022-12243 CVE-2022-29888 · GHSA-jvhv-c9pj-767g

A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi…

HIGH 68

A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01624 Published 2022-11-09 No fix listed CWE-489

TI-2022-09508 CVE-2022-26007 · GHSA-qqcg-f3m6-q34f

Command injection in InHand Networks InRouter302

HIGH 67

An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.05446 Published 2022-05-12 No fix listed CWE-77

TI-2022-09506 CVE-2022-26002 · GHSA-wrch-x9jr-vrp8

Stack-based buffer overflow in InHand Networks InRouter302

HIGH 67

A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03412 Published 2022-05-12 No fix listed CWE-121

TI-2022-08885 CVE-2022-25172 · GHSA-pqgp-549c-xhq5

Incorrect permission assignment in InHand Networks InRouter302

HIGH 66

An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01035 Published 2022-05-12 No fix listed CWE-1004

TI-2022-08719 CVE-2022-24910 · GHSA-g8jg-j3w6-vgf8

Buffer overflow in InHand Networks InRouter302

HIGH 65

A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.01341 Published 2022-05-12 No fix listed CWE-120

TI-2022-09851 CVE-2022-26510 · GHSA-567v-8x5m-wxxw

Improper signature verification in InHand Networks InRouter302

MEDIUM 64

A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01307 Published 2022-05-12 No fix listed CWE-347

TI-2022-11943 CVE-2022-29481 · GHSA-g8qv-j323-hj3f

A leftover debug code vulnerability exists in the console nvram functionality of InHand…

MEDIUM 62

A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00894 Published 2022-11-09 No fix listed CWE-489

TI-2022-09515 CVE-2022-26023 · GHSA-9v4w-g4mw-792q

A leftover debug code vulnerability exists in the console verify functionality of InHand…

MEDIUM 62

A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00902 Published 2022-11-09 No fix listed CWE-489

TI-2022-09513 CVE-2022-26020 · GHSA-v7wj-223x-4h9h

Hard-coded credentials in InHand Networks InRouter302

MEDIUM 62

An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00681 Published 2022-05-12 No fix listed CWE-321

TI-2026-28185 CVE-2026-38707 · GHSA-rxwx-v72h-6h2m

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2026-05-28 No fix listed CWE-77

TI-2026-28184 CVE-2026-38704 · GHSA-rqq4-2m8x-2xjv

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01269 Published 2026-05-28 No fix listed CWE-77

TI-2026-28183 CVE-2026-38703 · GHSA-v2wr-27g8-qcqh

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2026-05-28 No fix listed CWE-77

TI-2026-28182 CVE-2026-38702 · GHSA-pgp8-j574-4f6p

A command injection vulnerability exists in the Admin Access feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2026-05-28 No fix listed CWE-77

TI-2022-11333 CVE-2022-28689 · GHSA-j956-v3jj-36f8

A leftover debug code vulnerability exists in the console support functionality of InHand…

MEDIUM 40

A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01137 Published 2022-11-09 No fix listed CWE-489

Open these records in search →