Vulnerabilities

TI-2023-08791 CVE-2023-22601 · GHSA-8rgq-7c98-wxpm

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to…

MEDIUM 50

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00578 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-330

TI-2023-08790 CVE-2023-22600 · GHSA-p6gg-9438-r6rj

Improper access control in InHand Networks InRouter 302

MEDIUM 49

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00506 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-284

TI-2023-08789 CVE-2023-22599 · GHSA-3q43-m4hc-qh5p

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to…

LOW 39

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0033 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-760

TI-2023-08788 CVE-2023-22598 · GHSA-x3rw-7xfq-v6g9

OS command injection in InHand Networks InRouter 302

LOW 37

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization of Special Elements used in an OS Command…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01706 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-78

TI-2023-08787 CVE-2023-22597 · GHSA-9h47-6hm4-j5r2

Cleartext transmission of sensitive information in InHand Networks InRouter 302

LOW 29

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00528 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-319

TI-2022-09477 CVE-2022-25932 · GHSA-77rh-r8h5-mfmc

Improper access control in InHand Networks InRouter302

MEDIUM 43

The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00717 Published 2022-11-09 No fix listed CWE-284

TI-2022-06181 CVE-2022-21809 · GHSA-399c-25pm-72mj

Unrestricted file upload in InHand Networks InRouter302

HIGH 70

A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0182 Published 2022-05-12 No fix listed CWE-377

TI-2022-05629 CVE-2022-21238 · GHSA-hmwh-6pgm-776g

Cross-site scripting in InHand Networks InRouter302

MEDIUM 60

A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01537 Published 2022-05-12 No fix listed CWE-80

TI-2022-05581 CVE-2022-21182 · GHSA-h6h4-hwj4-6rv9

Improper access control in InHand Networks InRouter302

HIGH 71

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01971 Published 2022-05-12 No fix listed CWE-284

Vulnerabilities

Filters