Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: InHand Networks Component: Inrouter615-s Firmware Clear all filters
TI-2023-08791 CVE-2023-22601 · GHSA-8rgq-7c98-wxpm

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to…

Priority MEDIUM 50

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00578 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-330
TI-2023-08790 CVE-2023-22600 · GHSA-p6gg-9438-r6rj

Improper access control in InHand Networks InRouter 302

Priority MEDIUM 49

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00506 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-284
TI-2023-08789 CVE-2023-22599 · GHSA-3q43-m4hc-qh5p

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to…

Priority LOW 39

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0033 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-760
TI-2023-08788 CVE-2023-22598 · GHSA-x3rw-7xfq-v6g9

OS command injection in InHand Networks InRouter 302

Priority LOW 37

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization of Special Elements used in an OS Command…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01706 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-78
TI-2023-08787 CVE-2023-22597 · GHSA-9h47-6hm4-j5r2

Cleartext transmission of sensitive information in InHand Networks InRouter 302

Priority LOW 29

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00528 Published 2023-01-12 Fixed in IR302 V3.5.56, InRouter6XX-S-V2.3.0.r5542 CWE-319