InHand Networks vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2023-22601 InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: UseCritical 10 · Jan 12, 2023
• CVE-2023-22600 InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: ImpCritical 10 · Jan 12, 2023
• CVE-2023-22599 InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: UseHigh 7 · Jan 12, 2023
• CVE-2023-22598 InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: ImpHigh 7.2 · Jan 12, 2023
• CVE-2022-30543 A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45.High 8.8 · Nov 9, 2022
• CVE-2022-29888 A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45.High 8.1 · Nov 9, 2022
• CVE-2022-28689 A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45.High 8.8 · Nov 9, 2022
• CVE-2022-25932 The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474.Critical 9.8 · Nov 9, 2022
• CVE-2022-27172 A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37.High 8.8 · May 12, 2022
• CVE-2022-26782 Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4.High 8.8 · May 12, 2022
• CVE-2022-26781 Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4.High 8.8 · May 12, 2022
• CVE-2022-26780 Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4.High 8.8 · May 12, 2022
• CVE-2022-26518 An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37.High 8.8 · May 12, 2022
• CVE-2022-26420 An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37.High 8.8 · May 12, 2022
• CVE-2022-26085 An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4.High 8.8 · May 12, 2022
• CVE-2022-26075 An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37.High 8.8 · May 12, 2022
• CVE-2022-26042 An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4.High 8.8 · May 12, 2022
• CVE-2022-26007 An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.High 7.2 · May 12, 2022
• CVE-2022-26002 A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.High 7.2 · May 12, 2022
• CVE-2022-25995 A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4.High 8.8 · May 12, 2022
• CVE-2022-21809 A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4.High 8.1 · May 12, 2022
• CVE-2022-21182 A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4.High 8.8 · May 12, 2022
• CVE-2021-38486 InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements tHigh 8 · Oct 19, 2021
• CVE-2021-38484 InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files toCritical 9.1 · Oct 19, 2021
• CVE-2021-38482 InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scripting, which may aHigh 8.7 · Oct 19, 2021