📦 Ir302 Firmware

by Inhandnetworks

🔍 What is Ir302 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2022-26781

HIGH CVSS 8.8 May 12, 2022

This vulnerability allows remote attackers to execute arbitrary code on InHand Networks InRouter302 devices by exploiting improper input validation in libnvram.so and httpd components. Attackers can s...

CVE-2022-27172

HIGH CVSS 8.8 May 12, 2022

CVE-2022-27172 is a hard-coded password vulnerability in InHand Networks InRouter302's console infactory functionality that allows attackers to execute privileged operations via network requests. This...

CVE-2022-25995

HIGH CVSS 8.8 May 12, 2022

CVE-2022-25995 is a command execution vulnerability in the console inhand functionality of InHand Networks InRouter302 devices. Attackers can send specially-crafted network requests to execute arbitra...

CVE-2022-26007

HIGH CVSS 7.2 May 12, 2022

This CVE describes an OS command injection vulnerability in InHand Networks InRouter302's console factory functionality. Attackers can execute arbitrary commands on affected devices by sending special...

CVE-2022-26042

HIGH CVSS 8.8 May 12, 2022

CVE-2022-26042 is an OS command injection vulnerability in InHand Networks InRouter302's daretools binary that allows remote attackers to execute arbitrary commands on affected devices. Organizations ...

CVE-2022-26085

HIGH CVSS 8.8 May 12, 2022

CVE-2022-26085 is an OS command injection vulnerability in InHand Networks InRouter302's httpd wlscan_ASP functionality that allows authenticated attackers to execute arbitrary commands via specially-...

CVE-2022-26518

HIGH CVSS 8.8 May 12, 2022

CVE-2022-26518 is an OS command injection vulnerability in InHand Networks InRouter302's console infactory_net functionality that allows remote attackers to execute arbitrary commands on affected devi...